update-authorized-keys: use --decrypt to verify and output in one step
update-authorized-keys: use --decrypt to verify and output in one step

This makes completely sure that only the signed data will be used as
part of authorized_keys.

I didn't want to use --decrypt, but then I realized I already use it
separately, so fuck it, adding --batch --yes should be enough.

grawity/hacks,grawity/hacks,grawity/hacks,grawity/hacks,grawity/hacks,grawity/hacks,grawity/hacks