base

keystore: enable delete(), scan(), exist() when keystore is locked.

Also check end-of-file explicitly.