fix TKEY problems
Change #4148 wasn't complete
- there was a memory leak when using negotiated TSIG keys.
- TKEY responses could only be signed when using a newly negotiated key; if an existent matching TSIG was found in in the keyring it would not be used.
Closes #849 (closed)