config: better error reporting for key load