rework some of the data protection configuration detection code; generate the keys if needed on the initial configuration page