def process_private_keys(current_state, desired_state)
            return [] if desired_state.nil? && !current_state.policy.remove?
            account = desired_state || current_state
            current_keys = current_state ? current_state.private_keys : {}
            desired_keys = desired_state ? desired_state.private_keys : {}