aes256: add new option 'nogenkey' to allow later keyfile creation