keyholder: add icinga check

Add a check that ensures the keyholder agent is armed with the key.

Change-Id: I4a5d4bf6429ccf2571c27e13a3039324a100a528