encrypted-keys: add key format support