The distsearch.conf can be deployed to the search head via the deployment server, but there is no straightforward way to ship the keys to a peer.
You could probably build a splunk app that distributed them, and then ran a script to install them, though it is probably easier to just make it part of the initial deployment.
