In case someone comes here whose problem is not dashes:)

I had a silly one, directive (remote-cert-tls server) after the embedded data. I had some commented directive there, and thought they can occur anywhere in the config file. They can not, embedded keys must come last.