Mark fallback directories down when their key is wrong

arma says that we will happily retry fallback directories with the wrong key fingerprint. We can do two things to fix this:

• mark fallback directories as down when their key fingerprint is wrong
• cancel all pending connections to a fallback with the wrong key (perhaps in #18809 (moved)) - this should be unlikely with 100 fallbacks