first pass at allowing passworded keys