generate a new key on install