move capture_lsa_key to priv