- allow finding a key by name only (instead of name and algorithm) - add creator field, which is filled in by TKEY