Remove generation of secret keys for all users on activation, move it to registration / enabling 2sa

[jariz]

Generating secret keys is resource expensive, generating keys for more than 5k users is.... too resource expensive.