document private key in source config