1 root key for metadata