return private key so we can relogin again without asking the user