s3:registry: don't directly access key->subkeys->subkeys[] in reg_api.c