Includes logic to help users manage their keys:
- If the key is using a default PIN, we require the user to change it.
- We set the PUK equal to the PIN so the user doesn't need to remember
them separately.
- We migrate the default management key to a new PIN-protected key.