add highly-confidential .pem