update key generation policy