Fix double sig key select in newkeyapproval

Update filter must be called also when no encryption
keys are added to hide a possible double signing key
selection.