add note about keys/values being public