Exactly. Sounded like the obtained four keys and then used an open backdoor RPC call to obtain the fifth.