The definition is probably not finalized, so this is a placeholder.
Currently the service (in parent issue) expects a <Keys> section under <EnvSettings> in the environment.
That will define a mapping of cluster names -> key pairs.
A named key pair will define the public and private key.
This information is used by the Esp and Dafilesrv's.