move pubkeys into api