use pem files instead of passwords