wireguard-tools: allow generating private_key