debian: update control file with package suggestions
setup: restrict access to generated private keys