Create OpenPGP certificate by default with --gen-key

Create an OpenPGP certificate directly using the corresponding command
unless the CMS protocol is explicitly requested with --gen-key.
Additionally, check whether the creation of an S/MIME CSR is allowed,
and return with an error if it isn't allowed.

GnuPG-bug-id: 5832