keep private keys private
use local IPs