The user is already instructed to do so and must confirm the step:
I would not want to block it too much at this point with specific instructions on how/where to save it. Maybe it could be added at the end.
Discussion
That looks great!
If you want to provide more details, I'm thinking an external link for "Best practices for securing a key" would do the trick.
I think what you have now is fine without it though.
