Since cephx is the default now, only skip key generation/use if
cephx is explicitly disabled.