allow setting private key for root