consistency check to make sure keychain and core data match, they can diverge since they have different access and backup policies, fixes #49, fixes #51