support specifying a password when loading private keys