Do not keep keygen running, check certs each time
    
    Rely on condition of unbound-keygen service. If it does stop after
    generating them, then it will recreate also after restart later. That
    might be the case if someone removes these certificates.