server/keymgmt.c, server/tripe.c: Add `km_clear' to shut down keyrings.

A bit more fiddly than our previous efforts, but this completes the job
of unwinding all of the configurable components of the server.  The main
thing that doesn't get reset is the set of extant admin connections, and
I intend to leave those running until we have no choice.