- opgpcard admin generate by default prints the corresponding certificate to stdout, where it's easy for a careless user to lose it. - Make the --output argument mandatory, so the certificate is always stored in a file.