remove npm "private" key