_keyfile_convert() should really test for successful round-trip conversion of keyfile-connection and vice versa.