Function retain_origin_users 

fn retain_origin_users(origin: &ServerName, response: Response) -> Response

Drops the one-time keys of users who do not belong to the server that answered.

A server is only authoritative for its own users; any other entry, local users included, would otherwise replace that user’s keys in the response.