pki: Fix ability to use ECDSA host keys

- Ensure ecdsa_nid is copied into duplicated private keys
- Use SHA-2 for sessionid generation with ECDSA keys (was SHA-1)

Signed-off-by: Alan Dunn <amdunn@gmail.com>