When deleting an encryption key, check if there is at least one other
active keyslot, and do not delete if there isn't.

Replace the very similar encryption_keys_post and encryption_keys_put
callback functions by a single handler function, with a boolean flag to
separate the two variants.