don't generate a new key on install-selfservice if there's already an RSA one either