* ud-lock: support supplying a status to set instead of 'retiring'.
* ud-generate: Also rebuild if one of our keyrings has changed, even if
ldap has not.
* ud-lock: support supplying a status to set instead of 'retiring'.
* ud-generate: Also rebuild if one of our keyrings has changed, even if
ldap has not.