rw is enough for the insecure_key