When the action misses the primary key but hits a fallback from restore-keys, it still says Cache hit for <primary-key> and restores from the restore-keys. I think it would be much better if it said Cache hit for: <actual-key-that-matched> in such cases.

This could be confusing because cache-hit output will be false.