Require key flags to use keys

[twiss]

Don't allow using primary keys without a valid self-signature with key flags indicating the usage is allowed.

[ncw]

This has broken our workflow - see https://github.com/ProtonMail/go-crypto/issues/187