Factor apart keys into a file-per-class

This is mostly in anticipation of adding SigningKey/VerifyKey classes. I
feel some refactoring is in order here to keep the keys files/specs from
becoming overwhelming.