Feature idea: private/1-on-1 messaging

[elimisteve]

Not possible till #106 or some other sign-in mechanism is in place, because users need to have their own key.

(We could have each client generate an ephemeral key and use that, but I'd rather have people type in a passphrase they've memorized so that their identity is the same across their devices.)