Methods to filter a KeyIter based on key capabilities should be named similar to the KeyFlags methods
KeyIter::certification_capable should be called KeyIter::can_certify like KeyFlags::can_certify (or vice versa, although I prefer the shorter names).