There has been a change in the configuration of NX on the shell servers such that it is no longer necessary to import a special key. You still need to check “Use NX login”, but do not specify an alternate key or cut and paste one in.
I discovered how to do this in the process of setting up new servers so changed the existing as well since it simplifies setup for the end user.