We should probably add to the recipe something to copy this private key to the right path.

Or I could finish up the change that allows us to pass in a *public* key to the API and thereby bypass having to have a shared private key. Probably better to do this.