Storing the keys in /etc/ is the default option in foreman-proxy.  I followed the same pattern here.