This relies on a new shell API to ungrab keys in bulk. The approach now
is that we keep a set of keys that need syncing. For this set of keys,
we emit one Ungrab call and one Grab call in two steps.

This likely fixes issues like the ones reported in #151. Another reason
to do this is as a preparation to allow multiple keybindings per key.