add a rule to lt-keys to 401 documents with `kind: private-key`
add a rule to lt-keys to 401 documents with
kind: private-key