#536 added a safety check for key keyids in root metadata. Now that I think about it, it could apply to targets metadata as well