looser permission restrictions on .pub keys