better tarsnap key conditional