--keyfile-ro root2.keys