private key.  (You want it to be a regular file owned by the
database process, with 0400 or 0600 permissions.)

Bear Giles