After dismissing security flaw, Amazon patches Key smart lock anyway