without this, we lose ability to authenticate with default keys