is "key" the actual key or the path to the key file? Having 'rsa.key' as the default value seems weird from the code I'm reading.