make sure we don't copy the user's private key as well