Don't put private keys in the root manifest!

Signed-off-by: Lewis Marshall <lewis@lmars.net>