Its a timing issue, if there is a golden image it the GPOs will not apply the key in time.