better to check for !private exponent when determining key type
use real rather than effective UID when searching for ticket caches