command: use separate key files for LAN/WAN