registrar: split key generation and startup config

Currently the example registrar creates its own keys internally on start up and always loads them from a fixed location. Breaking this out will simplify having separate NAC registrars from TTC registrars which is how this would be deployed in most scenarios.