Suggest keyring dependencies

apm now gracefully fails without them being installed and they
are only used for publishing and starring packages.