Don't allow certification using keys where primary subkey is stripped

Closes #596