allow passing identity keys as string blobs