use this key, except for the bootstrap step which copies the pub key over to fs/ops authorized_keys file.