removeAllKeys

Drops every key held for userId, at every index, falling back to the shared key for that participant. Shared keys are untouched — use removeSharedKey for those.