also make circleci set correct key permissions