Key file is looked up in current directory, then in SONGE_HOME, then in HOME environment variables.
In this last two cases, when changing the key file passphrase, a new key file is written in the current directory instead of overwriting the old file in its place.