If you use Alcali master returner, Keys should be automatically refreshed. That's the only difference from the original MySQL Salt returner.
Otherwise, you should refresh keys manually using the action button.
To make life easier, states used to manage keys are more radical than default salt behaviour.
It means that if you use the
REJECT button, it will use
If you use the
ACCEPT button, it will use