Api needs a PKCS8-format private key instead of regular x509