Implement bi-directional key verification #20

Having E2E in Matrix is nice, but to make it effective against active attackers requires that the keys are verified. As a first step, we need to implement an API endpoint and make use of it in the CLI tool.