Unconditional security of key distribution from causality constraints