Consider making `--public-key` optional for `validator sync`.

It's only needed right now because the ValidatorUpdater was not written to talk to nodes that don't have a public key.

But in general it makes sense to support syncing nodes that aren't even validators!

So we should generalize the ValidatorUpdater and allow it to deal with nodes that don't have a validator key at all.