private key permissions