Make privateKey Secret. Allow empty privateKey.

If privateKey doesn't exist or has length 0, don't import it.
User instead should import it with command line tools.