heroku process to sign private file access requests using key id and xored private key
enable gold maps to be public / private -- some cleanup to do still