moving private key into directory so we can pull it out into a submodule and restrict access