why not just `scripts/gen_keys.js` ?   requiring a specific cwd causes pain