-keyfile command-line option