npm install in project directory creates local default keys that need ignoring