Allow to customize key(s) to use for encrypt to self

This prompted some refactoring of duplicate code, and also surfaced a
bug, where, if a recipient was specified mutltiple times (with several
encryption keys), the mail would not be encrypted to any keys associated
with that recipient at all.