keys, trusted: move struct trusted_key_options to trusted-type.h