keys: add method to load cert and encrypted key

Consumers can now have the convenience of loading an openssh style key
and cert pair when the key is encrypted with a passphrase.