automating key file requires a separate block device