[enh] encrypted pfs keys. also added a 4th key