Even if Gentoo specs only allow package keys to be used in move statements inside profiles/updates. We can easily support full versioned dependencies (like: app-foo/foo:0 or app-foo/foo-1.2.3). In this case however, key_to has to be filtered out using dep_getkey()