not using triple-des so that we don't have to get prompted for the PEM key