add load/save from key instead of pw

so that clients may derive the key and then forget the pw, yet remain compatible