Add --include-all arg to salt-key

This commit adds an --include-all option to salt-key, and requires it to
be used in order to match rejected keys with salt-key -a, and accepted
keys with salt-key -r. See
https://github.com/saltstack/salt/pull/7509#issuecomment-25325666 for
more information.