handle the case of preexisting key (and possibly certificate)

[Geal]

What do we do if the user provides the key instead of letting the tool generate it? This can happen if we replace a certificate