private key needed for curl header