mkimage: Add -r option to specify keys that must be verified