A key generated for one connection type (http/https) always fails to decrypt on the other, surfacing only as a generic "invalid key" error after a round trip to the backend. Detects the mismatch client-side from the raw key text before the user submits, and disables the apply button while it's showing.