add feature to permit external pub keys