Ignore null keys when checking for de-vs compliance

Previously, in mixed mode, if both protocols were enabled, null keys
were not ignored resulting in non-compliance. If only one protocol
was allowed/enabled, then null keys were ignored by the protocol check
(because null keys have UnknownProtocol).

GnuPG-bug-id: 5283