Change private key cipher to AES 256 by default. Re-order arguments to
Gem::Security.write so cipher is last.
Write the private key to disk only when creating it.