Fix OAuth2 pk12 key download prompt.

yes. this exposes the key to all users on the machine and I don't see anywhere that it's deleted. also, changing from one hardcoded path to another is thrash. the solution is to make it configurable through config.js or environment variable.