Issue #3: default to ca-key.pem for key in serve