keystore works, mostly
invoke uses keystore
sftp uses keystore