Close keybase/keybase-issues#764

Don't allow encryption on the primary, and make the subkey only for encryption