[backend] revert -h parameter in keygen

It may interfere with the encrypt key selection. This is not
a problem for normal signing because the key is taken from the
decrypt data.