beware that private key is positive