check_keyholder: make agent unarmed alerts CRIT

Plus small tweaks to 'keyholder' shell script.

Change-Id: I824ec66db19cb0ab200369258833a1d608aea953
Merge "check_keyholder: make agent unarmed alerts CRIT" into production