Use keycache to autoresolve

* lots of changes.

The keycache is now used if opt.autoresolve is set to resolve
the signing / encryption keys without loading the resolver binary.