add a layer guard for ssh keys