sys-apps/keyutils-1.5.9-r4 is stable and does not specify a subslot. Newer versions do specify a subslot, but almost no reverse dependencies specify their dependency with :=, so upgrading keyutils will not force a rebuild. This bug tracks adding subslot operators to reverse dependencies.