gpg: Allow key-to-card upload for cert-only keys