This is a backwards-incompatible change; it alters the key pair types used for
long-term signing as well as ephemeral key agreement. Old identities are now
worthless.