notary key generate delegation keys

[endophage]

In the near future it would be great to generate delegation keys inside a yubikey as the recover process for them is to just generate a new one. We should modify notary key generate to permit generation of these delegation keys as a precursor to that (also means users don't have to mess around with openssl).