add private key management