we fingerprint the *public* key, not the private one
Merge pull request #3 from warner/master

we fingerprint the *public* key, not the private one