and to generate one. When generating one, look for a revoked/expired
certificate and reuse the key (and password) otherwise generate a new
key and new random password. This allows existing Emulab users who have
never used Geni, to use the APT/Cloud interface without having to create
a key via the web interface.