s3:registry: wrap reg_createkey() in a transaction