private key exposed