Refactor encrypted storage

Preparations for supporting a signature field for accounts in the Keysmith accounts settings file. Such a signature should help protect against tampering with accounts, which will in turn enable safe(r) import/export features to be built.

This MR is WIP pending various fixups to be suggested by clazy...