#1 - add private key for hmac