set the key's chmod at 0600
don't write the private key until we're going to need it
return the command's output too