key management opts fleshed out, currently p ugly tho