Don't allow empty key ids in keystore

Fixes https://basecamp.com/1949725/projects/3987395-backlog/todos/64603406-slosilo-enroll