uc_file_user->file_key should only be generated, not updated on file grant/renew

I think this will be necessary if/when the CA locking issue is straightened out. Regardless, this won't break if it isn't, should have always been like this.