Actually after one day everything started working really well. One master key is the default, so everyone does that. Key management client sounds like a very good idea, thanks!