Only allow private keys associated to accounts of an app