The only thing I had not done was:Did you read this manual?
https://www.keycdn.com/support/xenforo-cdn-integration/
Important: When using avatars in Xenforo, the feature Ignore Query String needs to be disabled. It’s recommended to purge the whole zone after this zone change.
It seems to be taking a while to deploy so maybe that is helping. Is there a way to view what files are in my cache? ftp to my keycdn still shows an empty directory even after re-deploying. It finished redeploying, I tried switching config and settings to keycdn and nope, broken images everywhere
Might have to give up on keycdn and see if maxcdn will work, the pull does not seem to be working. everything is a MISS (site name removed):
2016-02-21 02:58:07 usse 71.17.87.90 CA site.kxcdn.com MISS 404 GET /styles/site/xengallery/AjaxLoader.gif
2016-02-21 02:58:06 usse 71.17.87.90 site CA .kxcdn.com MISS 404 GET /styles/site/xenforo/gradients/category-23px-light.png
2016-02-21 02:58:06 usse 71.17.87.90 CA site.kxcdn.com MISS 404 GET /styles/site/xenforo/avatars/avatar_male_s.png