add some hsmkeys
fail on db failure
merge cmd and task