The command kesl-control --revoke-additional-key removes the additional key.
kesl-control --revoke-additional-key
Command syntax
kesl-control [-L] --revoke-additional-key