How do I keep from losing nixops ssh keys?

When creating machines with nixops deploy it creates a custom keypair per machine, right?
I assume it stores those in the state database file.

What do I do if I were to lose those? Should I configure my machines to allow root login using my own keypair?
What if I want to manage my deployments from another machine?