1) org rule `private_key_manager_url` 2) org rule flag `PRV_AUTOIMPORT_OR_AUTOGEN` and `PASS_PHRASE_QUIET_AUTOGEN`