Have the MS host the encrypted gateway private keys, if the user
desires.  If this is the case, the gateway will attempt to download
the encrypted private key instead of requesting it in argv.