It makes more sense for new_keys() to be in new_net_crypto()