demand a PrivateKey when subscribing by audience