ensure key is secure