$session->setPrivateKey expects only one parameter
let user update private key password in case it was changed from outside, e.g. external auth back-ends