store keys in sensitive.json