Config: Add support for generating keys

Note that `creates` has no effect until Helium, so this won't work as expected on older versions of salt.