If you provide a distribution key that doesn't exist (e.g. django(495.0.0) or nonexistentpackage(1.0.0)), that will be added to the blacklist. This is potentially problematic if the blacklist is to be used for statistics.
This is true whether using --local operation or remote.