Handle "critical" subpackets properly

address keybase/keybase-issues#682