Set validate keylist mode for keycache

* src/keycache.cpp (do_populate_protocol): Add validate option.

This fixes S/MIME keys for verfied signatures to have trust
level 2 (because their trust was unknown) before the key
is first updated.