Require the key to decrypt before generating a new keypair.