optionally take tarsnap key from databag