keyId & key protected to allow access in derived class