Allow ed25519 keys to be banned in the approved-routers file

Once we start pinning ed25519 keys, we should probably also allow directory authorities to ban them in approved-routers. This will allow us to migrate away from RSA keys at some point.

(Where else do we use RSA fingerprints?)