document `-m PEM` option to ssh-keygen

[gdamjan-h4]

New versions of openssh changed the default file format of the keys generated by ssh-keygen to their own special format. Bless only supports the PEM format, so documentation needs to specify the -m PEM option for versions of openssh newer than 7.8 (inclusive).