add pki::key for client key management