I believe that KEYPACH and KEYDIFF were always a THOR only process. You update your key on THOR and then publish to ROXIE. ROXIE is designed to be read-only and a dedicated delivery cluster.
The better way to deploy indexes is to use package maps and superkeys. This blog has all the details of best practices and deployment to ROXIE:
Regards,
Bob