private key control