structure and decides what key to generate (if any). Not currently added to
the PBE algorithm list because it is largely untested.