sync_keys split into add_keys and delete_keys

This is so that keys can be deleted before aliases.pl is called,
but we still know if keys are yet to be added