don't let people check in private keys