we now expect the key to be base64 encoded