diff --git a/.gitignore b/.gitignore
index f98101cd7f920..f3bd9b24938e2 100644
--- a/.gitignore
+++ b/.gitignore
@@ -78,3 +78,6 @@ result
 
 # Zed
 .zed_server
+
+# dlv debug binaries for go tests
+__debug_bin*
diff --git a/cli/ssh_test.go b/cli/ssh_test.go
index b403f7ff83a8e..659d907188294 100644
--- a/cli/ssh_test.go
+++ b/cli/ssh_test.go
@@ -1843,7 +1843,9 @@ Expire-Date: 0
 	tpty.WriteLine("gpg --list-keys && echo gpg-''-listkeys-command-done")
 	listKeysOutput := tpty.ExpectMatch("gpg--listkeys-command-done")
 	require.Contains(t, listKeysOutput, "[ultimate] Coder Test <test@coder.com>")
-	require.Contains(t, listKeysOutput, "[ultimate] Dean Sheather (work key) <dean@coder.com>")
+	// It's fine that this key is expired. We're just testing that the key trust
+	// gets synced properly.
+	require.Contains(t, listKeysOutput, "[ expired] Dean Sheather (work key) <dean@coder.com>")
 
 	// Try to sign something. This demonstrates that the forwarding is
 	// working as expected, since the workspace doesn't have access to the