host-specific key dirs
prune some old keys