rework attach to require explicit key