need public key file to avoid passphrase