A key-handle whose public_key/1 calls exit/1 (simulating a GenServer.call timeout in a production HSM/key-server callback). Cross-vendor round 2 blocking finding: rescue did not catch exits, so this crashed the caller. The catch clauses now contain it -> :invalid_key_handle.