Similar to the administrative command refresh_keys we now offer a command pin_keys, which will pin subscriptions without a fingerprint to a distinct key, if one can be found. Closes #225