I've automated as much as possible, and tucked the setup in it's own script which the user is prompted to run if no keys exist.