moved insecure key to right location