Entries consisting only of dots (".", "..") are now a startup error naming the key and entry. Previously a bare "." passed validation and became a suffix pattern matching every trailing-dot FQDN upstream, bypassing URL signing.