Implement a stricter ECX_KEY type