Enable client-side key generation by default (fixes #1711)

\cc @opscode/client-engineers