keytool only runs one command at a time, so something like "keytool -genkeypair -importcert" will only sees the -importcert command. This is is almost always a user mistake and keytool should not allow it.