koeppelmann's idea that privkey should be taken out of the DB