client should get own key