('kx-expire', 'now + 1 year'),
('kx-warn-days', '28'),
('cipher', 'rijndael-cbc'),
('hash', 'sha256'),
('master-keygen-flags', '-l'),
('kx-expire', 'now + 1 year'),
('kx-warn-days', '28'),
('cipher', 'rijndael-cbc'),
('hash', 'sha256'),
('master-keygen-flags', '-l'),