posts:x.509-certificates: Use --outfile with --generate-privkey