Refactor the zkapauthz configuration strategy to remove some duplication

This will make it easier to add the new allowed-public-keys item which must be
present regardless of chosen redeemer.