Add postcondition to pem->private-keys