minor improvement to private key handling
nginx.locations is no longer needed