add [un]wrapping of private keys