Redaction support

[tarcieri]

Support a syntax for redacting content from documents while allowing their corresponding objecthashes to remain the same. This would likely take the form "r:<previous objecthash>".

Data to be redacted should always be authenticated alongside a corresponding high-entropy salt/nonce value so as to prevent preimage attacks (this could perhaps use a "n:" syntax?)

cc @benlaurie