deploy key needs to be in a safer permission mode
rearanged tasks for better execution order