All commands with NeedSecretKey restriction perform secret key operations,
i.e. they require the secret key of the primary key pair. Therefore, we
need to check the secret flag of the primary subkey.

GnuPG-bug-id: 5956