switch to RSA keys