def process_public_keys(current_state, desired_state)
            return [] if desired_state.nil? && !current_state.policy.remove?
            account = desired_state || current_state
            current_keys = current_state ? current_state.public_keys : {}
            desired_keys = desired_state ? desired_state.public_keys : {}