Family key

Browsing never needs it. Naming, moving and tagging faces do, so a stranger cannot undo the family's work.