mature key management

[jchris]

There are two phases to key management. The first is when we are still using a static key per database, instead of a rolling key per car file.

In the first phase, we can consider:

• moving keys from the clock header dbMeta to the account database
• APIs and documentation about how to use enterprise managed keys