diff --git a/unshackle/core/cdm/decrypt_labs_remote_cdm.py b/unshackle/core/cdm/decrypt_labs_remote_cdm.py
index c09f275..8645b4e 100644
--- a/unshackle/core/cdm/decrypt_labs_remote_cdm.py
+++ b/unshackle/core/cdm/decrypt_labs_remote_cdm.py
@@ -625,8 +625,9 @@ class DecryptLabsRemoteCDM:
 
         if "cached_keys" in session:
             cached_keys = session.get("cached_keys", [])
-            for cached_key in cached_keys:
-                all_keys.append(cached_key)
+            if cached_keys:
+                for cached_key in cached_keys:
+                    all_keys.append(cached_key)
 
         for license_key in license_keys:
             already_exists = False
diff --git a/unshackle/core/vaults.py b/unshackle/core/vaults.py
index d4e9408..1c50f71 100644
--- a/unshackle/core/vaults.py
+++ b/unshackle/core/vaults.py
@@ -74,7 +74,9 @@ class Vaults:
         for vault in self.vaults:
             if not vault.no_push:
                 try:
-                    success += bool(vault.add_keys(self.service, kid_keys))
+                    # Count each vault that successfully processes the keys (whether new or existing)
+                    vault.add_keys(self.service, kid_keys)
+                    success += 1
                 except (PermissionError, NotImplementedError):
                     pass
         return success