Use new key flags to check for sign and encryption capability

In this case, the old flags would also work because only valid (i.e.
not expired, not revoked, and not otherwise invalid) sign/encryption keys
are wanted, but it's better to be consistent.

• GnuPG-bug-id: T6753