Make cli-migrate lookup keys distinctly if no fingerprints are set

• Look up keys for members if they don't have key_fingerprint set.
• Use key for admin only if it's a dictinct match

In a drive-by-fashion the distinct lookup is fixed in ListBuilder, too.

Closes #217 (closed)