sanitized the way key filenames are set

there was some inconsistency in the way load_keys was accepting
different parameters or guessing from the tomb filename.

fixes #98