Safety deletion parameters

Separate concept of a key input to specify candidates for deletion and a filename for where to write new keys