The key turns out to be predictable given that it is sequentially issued and constructed from the passport expiry date, birth date, passport number, and checksum.
They may insert themselves into unused space within a binary so as not to change the size or other characteristics of those files (though they would affect a checksum).