Capability to generate PKCS8 key.

[sebukoleth]

While using this to generate certs for Java code ran into problem that Java cannot process PKCS1 keys. Did not want to use Bouncycastle just for that. So added a command switch 'key-algo', defaulting to 'PKCS1' that will accept 'PKCS8' to create PKCS8 keys.