Differently from SSH, you don't need a custom key-pair to be used by the client to connect to the daemon. The NX daemon already runs as user 'nx', so the remote user doesn't need a special key-pair to log as 'nx' on the system.