Making key option default to cert option, readme cleanup