abandoning never frees a confirmed key