Make it easier to issue ds-seen for the operator

In order to make it easier for the operator to perform key rollovers you may need an "--all" flag to the ods-ksmutil software. This flag just tells the Enforcer that all keys waiting for ds-seen to complete a rollover, has been published by the parent.

If we can't do this, the operator has to find the specific key that you have to issue a ds-seen command for by either the cka_id or the keytag, neither which is sent through the new submission code.