only allow selected keys