protect private keys