uses hardcoded master key