code: func NewKey() (key *Key, err error) {
  	priv, pub, err := native.GenerateKeyPair("")
  	if err != nil {
  		return nil, trace.Wrap(err)
  	}
  
  	return &Key{
  		Priv: priv,
  		Pub:  pub,
  	}, nil
  }
docs: // NewKey generates a new unsigned key. Such key must be signed by a
  // Teleport CA (auth server) before it becomes useful.