Only the key is needed, and currently the vagrant OEM is completely broken outside of vagrant. This gets vmware_insecure images back into the state that they were before cloud config came along. :)