Makes sense, but it is still a problem in that --delete-secret-subkeys doesn't
work if you don't have the secret identity key. Which means that it's impossible
to delete the secret subkeys except by getting their keygrip and deleting them
in the private-keys-v1.d directory, though I suppose this is for a different bug
report.