why is there no local_key option to go with local_cert ?

How to tell the bundle where the private key for the `local_cert` is ? Is it a security risk to define `local_cert` as a PEM certificate that concatenates both the certificate and the private key as this file is going to be sent to the server ?
