Version on the website is 2.0.2, version in the script file is 2.0.1.
it's the source tar.bz2 which has the wrong version, in the rpm's it's fixed (the srpm even as a patch for it! ;)) http://distro.ibiblio.org/pub/linux/distributions/gentoo/distfiles/keychain-2.0.2.tar.bz2
version 2.0.3 has just been released (unstable, ~x86) due to other changes. the version number is now correct in the distfile. anyway, as the release isn't marked stable yet, the website hasn't been updated as well, so I guess we've juist gotta wait a few days ;)
So long, and thanks for all the fish
keychain version looks right to me in the ebuild. closing this. reopen if I've missed something obvious.