generate new keys with a unique filename
--try-all flag to try all decryption keys in cwd