How do remote key handoffs work for hosts?