key management now done before boxcar