generate idp keypair on demand

Less manual steps, plus easier AWS deployment.