Thanks for the suggestion.  Backporting the keytable unit tests added by
rt46267 to v9_11 requires stripping them from key node trust status
checks.  I did that as an experiment and it turned out that the added
tests basically became duplicates of the already existing ones.  Also,
adding them would place an additional backporting burden on us in case
we want to modify these tests in the future.  Given all the above, I
decided against backporting unit test changes from rt46267 and I just
applied changes from rt46407.