gkeys: Improve capabilities checks, fix key_passed logic

In some cases, it reported pass for glep requirements while also reporting the key not having a signing subkey.