serf: make KeyManager public