pem2openpgp: break out usage flags, default to creating an authentication-capable...