auth: prevent uninitialized key list in AFS config