Document that keyring file should not have the `.json` extension

The underlying cause of #513 is that the keyring file was named with the `.json` extension, and thus loading was attempted with the rest of the configuration. We should call this out explicitly in the documentation to avoid others hitting the same issue.