add finger_master to key module

This would help us because we need to validate the master key is up to
date.

The plan is to expose the finger prints on the master (via salt-api).
The minion will periodically check. If it's master finger print is
wrong, then the minion will delete and start the auth process again.
wha?