Update key type/length logic to use ``with-colons``

Splits restriction logic environment variables to include a length and
an algorithm type (e.g., restrict DSA keys)