rename ambiguous pkey into pubkey