Support loading an existing key when generating a CA Cert