Require specification of an encryption key when creating an encryption zone

Currently, when creating an encryption zone, if the user does not specify a key name, the NN will generate a new one with a UUID. This leads to opaque names, and there's no way to specify further key creation attributes. Simpler and better is to make the admin first create the key however they like (e.g. via "hadoop key") and then specify it when creating a zone.