I start just one factotum (at boot time, the kernel launches one). What I do is to update its set of keys later, when secstore starts. I'll check to see if I have an old rexexec version as Presotto said. Thank u all for your help.