Got this as Kleopatra bug but GnuPG does not allow this:

gpg2 --gen-key --batch <<EOF
%ask-passphrase
key-type: RSA
key-length: 1024
key-usage: certify
name-email: foo@example.com
name-real: Test test
EOF
gpg: -:4: invalid usage list

I think the reason for this request is an offline certify key and everything
else as subkeys.