sniff keys instead