tools/secretstore: add sync command, re-encrypt

This kills two birds with one stone:

 - update the secretstore tool to be slightly smarter about secrets, to
   the point where we can now just point it at a secret directory and
   ask it to 'sync' all secrets in there
 - runs the new fancy sync command on all keys to update them, which
   is a follow up to gerrit/328.

Change-Id: I0eec4a3e8afcd9481b0b248154983aac25657c40
diff --git a/cluster/secrets/cipher/ca-kubefront.key b/cluster/secrets/cipher/ca-kubefront.key
index 78b1a0e..97a8e46 100644
--- a/cluster/secrets/cipher/ca-kubefront.key
+++ b/cluster/secrets/cipher/ca-kubefront.key
@@ -1,66 +1,66 @@
 -----BEGIN PGP MESSAGE-----
 
-hQEMAzhuiT4RC8VbAQgAmY9yNsQha8JRUERekemL1Yd1D3eoxOOefMAQwjkt/3FQ
-Xh55tGBo0SwhJuCn1pL61ixQ/uUxDY4sgMTWYMc8Jg4/HjH3XaBzMJp0HseRxqXR
-Mddc5Pov9ZJUm6yL3+99CvpY3jHQIlqvNqz2FclEkULRcTnl2WyTwiVwYUX4cCYT
-8FZWlLBl8Nc+13FsNMPRaPfhoTU4QdbNe7QCPEiQrTIXMvIqeHQJczCYOIhpZ7s7
-nMi7nfJq3AmEJEukXXirtkl/VeVE4D4UNeoshHqa/e7P5ju97L3gBLI6mZNK3nlV
-6Y2kt3R25X6euOekj2M/umsq/jfe7xGHGZKadRvOV4UBDANcG2tp6fXqvgEIAIEg
-HdGLnp62yrOTYHgZmkAdOCsIw6QOa/R1zsnSWHX6GPPKzFZa+dn4MaQzAIl/PmDl
-PfRBkz/xIf4jJOFm7oelyV27RrNUK58tbe+RQd04nbYLa3RmETxfC+tzz1naJMx1
-9WTjrmLf1y2k3Y43pXF6Ig/v6q2oXHSebIOZYnoa0nzfi1NzQlJ73rIGjBK3YYJS
-5qCWVchUu4hnAEQ6ffznnm8bGZSEiJii5u1s0BavaQaZg5dGpznLSG2yaqel12d6
-EUm1+TfYw4cxjFzYxceqWDnSclLTf58tI9Y8P9OSgP0DKYPQ4nCHXnsvYiwGK6fp
-107qMTjtV7Ihvydevy+FAgwDodoT8VqRl4UBD/4oabtRr5LZp3tJMPyVH8SbuVEJ
-5OnZHyQJbOytJFGfm14gXq/nfuWsslJSkwPS9ulbBdKXaY5pgiNaWDRgZG7VCTMY
-OQfinx/7o6sJFj8PUhX0HcZcnv3YggzgEyh/DvdRNhoqyizd5F2bi4j3sXd4Rw+u
-s33ilze0vGZ0rJc5YPLw6K3kFOv7Cltx6pqpIFph7fSvgORpxYq2Dcc2Ok5/p9Jo
-B4/Mzcp4HGhW1A+h3ovLueCWzY8bzpl23DuV4VeECfvUT5i08Xful/C8FtOhYSH1
-ix+3bHMddNUwIZuGzPhGcQzdqX8W7iFoHeYawOTbsiZJ7WiB4xS6ce4eGnYqxkwS
-rNWBiyJe+vfTz74hJP3Kechmyh59Rpc4K+O9FtEBMUTCC8sIZxgXUh9IMwjrf5qX
-60O8vdXpKrri4lS45/+7anRFemasDVwGnjLff3QuCj5fpVhJUrOPWgAqawdPGPvX
-3FbzMnI9uH483PbPlmD7h8xACMkRL12kRGofiAE3pXxwkd/Z6qT83gkEAa0w96mj
-W6/J2geBifJjb7Rttxr1BbkjA14RPvaX8vcJ7hsq4Jc3Fb4iZrl6LRPmCcHTXARm
-3V9GfV8tANoyWwlb7hAfAYvU/maJJBrHpfHtSs5UwSVOQ/7/Ra4fWY6+KRpe0qt5
-oPNqNX+1xBba0B7WkIUCDAPiA8lOXOuz7wEQAKZz1c+wpf7OmUvpKeXgSwg6mKSF
-2q1lgxSuwNBTryvHliFFGvhmLxG/YEa8fOKOAwPrpXiRQzbz6aaG00W162ulKOFD
-AjXNN5sWTeICduhzk0BO5oqXx/kreYE8DBn0lUsCO2AG9abt5whQiDKXTs7fbDMm
-bXtApgLHMSV+ImH33u68dbZc8WSb0bOs7rco3My0qlICfhls7VNRki8CfPUMJdDz
-NiXGqWASkAJJr9UmGgSoFf9m5pKKW54E6mclFVEEGk9OBdxLrl0gsl+CHtIOORCH
-hLLxAZ40sSPas/g540BT8W0SVU810zaONMeclH/eE1RQv6967oTJXhbhJwNOEwKQ
-CJUQyLxlTp7107zLY6U3Jhgti/63dU2zDzuP3jnOm5seB12FhfAbVrn9bWHPaSjb
-PBrvXEa7FqJxAWrNUV+ZAQlJNbjTPeQdior+PvE+FgUiXqC7arBYR/QDq+yEsi/9
-S3wXJdGuGHfBdXu3q1hrm+REQRVmCVTqxHQjabI0sekXQKHrbVM5kTc3pPV35p5i
-AkCJwBXuTwZgsWDUzB8THz2e1fy4zgVVJFTsp+xYi5pyLRcRJE9Miys6ovgJIs07
-inEm8Pbv1cQ5wMXtwLjpIpK6ki+Tbz8PtT5eBnIKkcCnhKqEKXO1qLYexdDVCRzH
-6eGJ+BhI9hni10010uoBS8+ryenobyy4XQ+1U1pdrQKEaOMXWxy/zrbucC+oFRSW
-WRPF0F8cTCSTsptKSIZkrzFwkSj0icIlH4xv6dIXxmBS9/ihJqA45PJ1trt9pFKb
-gJa5y57rj41HbFvjtp2Zms9y3oAiWRbrjTHy/4xRq6SlekdLu+wZcouYG2KJnzje
-nbpZNcFPHH7taqD6pGwt02DburDbYcIWEF+wNWcxf2021Q3J2cZDVDyWDgLXOnw8
-9gfQUvIjav4JH66mouIkRmYIxbbRUhdRHyrxuHyjcuJF7gKe8o3TlW0WJxRbxniH
-bUN8/wAP8Om8SHnxrOzVPUSiDXQdV3tsM4iM1i7ZYQorRT5jO16kGmxcaj16QkQ7
-A+e/u4HYyECbJLFoBmGaHaRrjldl1VBRphmRM1f425LdpthD8ab3djyuaQlAIGeT
-dC51/cct765p/BxJTXdiG+kmjXdTotsy270l2IZp5UXAmboYHvh6eNQJGX6m8DVf
-Z6+C/sMUKXeq+pvumvX3xrouwBU6fsGuZD/ILO1oji50RdNxpexflwAsTKmj8BSg
-n+Kw4NnfQwru5nHl4fWeXEK+HBmmtQCW6v/MLcGeFPjmAPZSJSSO2r6Qj8pORlwR
-zLuQAMY6Iv7q0CLPdyDzfGxqE6tuFqA0st+k5+B0Bbj2ngKpOZTPKUKWHI37ussj
-jDhFiWyXvDhCHk8Tnh7Bxsz5BtOI/k5Is04oYZ9iPWtp2gWenpy/qXdRJ+6ArxQK
-Y2DhHEnC9jZeLahiCFCJRRsVuC6ep7xQTw00FZLc8x92PasPtUY8WYHZOT9oVows
-dMlGnlcSu3OovjmrJDUU1Mcv2Lx8R6SmnN+zbtMEWUSK2FbediYxxlo1h/tXdcYs
-Qy99DSuFBIUGGw5NnhAQyUVhrIJmg417ieHwPQY8UFAiYmx3llAY4p2ECFL3K5cs
-BP2Bba8jzhBBGjHUq/IbjM2OegxIvftN99mmoy3kSumjWqpDgvdPeF9uhuu8NK/U
-QRxQX+DXLn3zPAmvgJh/Q6AHXIMh72yos4NOX0P2ke6OgjoO2INrwhtKfKVYXWAD
-5lANAzbko2ebv8AFtKH7o8J74YlYWJyUnnfwqQIdIPhZIyUGAbfx9sSrkWD2A/a9
-+fZJ3nitVghgYBSHQtDuezzuFBmas+tgnhUL15PrnxTvfR7pOkuKm4jhMGYc0Idj
-yiJ/IB2lzYcP3CNgwSDPA/RUvIvG0jv6yJFjzqCKm2ubpkjKqFRS6KxU2sGvk9yy
-QPDb3pWaP1IIBllxGt1hK2PmBYh1xTXf89IR9eM7yXFVjzDppGLMmBMgBFua5KR4
-8MuQxNi5EEh/unA1bMxbo8rlR8s3PgpMPLKzen4mwJRs1CAaF80gV/gcxR3w7CmO
-ADNZTbRbPWGPMkvnrWf+B7oNKzdEM8yzEB6UmQnnp1dAg6//y+nYt4tI8VK0oaag
-Ff00WDy/2iGWFdE9QRedIhyT/hbnFZKrrQwbu7/XdHd/OiFjogXCbyZo3BWkMopV
-aYyc6F+vNn2fhLA+RN4Do4AwPF4kdnHZaRIBExSliP5+sX1tOuh6fp1w4iPHYg8X
-wYE6iqjtrAlVMMDiAY5ekX/i/A61toJ1E0PG5ZiuZaW09Owj81CrBHW8tiHAQbH5
-/wdTHtfYs8Jvn4um1O1R9qFGnNrh0eRv5G97J5R4e80uhNTKLrw9+O5LCdctvHeo
-VpRAW8VS7Sj8d7LYvFwsFBXAa4otdi/o4IqibVpeqvvg8vthFkSvNI6PWK9mb9FX
-38rln0dEJCG9FeRShcAhpWfSl5wWilG26Y82gqWuB25a+FQc
-=8qiu
+hQEMAzhuiT4RC8VbAQf+KH3DDlAho71/pbnkccMf/wuAEcT+tfDwh3PqK3Lsd6jf
+vM81m+Rxycuu6EufK2TyNYqdEfHn198Pn4tVD3gxqf5KSqScs48QXH8QW3ScYUWU
+vmGLAm4KHx6vdJyWhGHdG1SrIjk4/KvzGiKQnYqKLhtsct/Cuw4Qr+eEYVg17ze8
+dKEiAT/IZ54OZG3aE98fbywoczDsUCVgZRcrzQxI6BCe+nVBxs6eGgZuJIjumWZG
+mts+r/wZOvuUkFdEeu9eEZRWHesVlTm4OaR8U7Lj+82kW80cjrEJFQVNt8bGf5SA
+kNyHk8AVvkT6QamJPWhj886Ul/HXW3eFRGkwW/OYU4UBDANcG2tp6fXqvgEH/i2t
+NjZNcxQuaUbHWAxcn5qT3DC2mHwKvaMmhry6DnDyouBfW+Id1vk+vqniRtQMkyla
+DfgmoIHMpJv2Tn2ncKvoi1uDiqOWWBUZIOYAdib2SROpTtJN4KoRbPXcvtUIlKoj
+oEetftRwLDjSYJ4dM3VzEbAEdXmvlQdtLAhiBZrMwOdxb5wkT6Arg82Md0oSmv98
+k8YbXBAeTLHR90I10AyvFGAF2CO2p1KXfEnI5Pel5ZYRw0dz+sjr1YsVEPuCiJS6
+gPYdHt0nYPodknfrxr4frIZdbQ3n85ZaYHpaxx9vb4itUKnuYee04fffF0VVyUGC
+yZpuZolBK7DXnHbcRDaFAgwDodoT8VqRl4UBD/4vj4yxBquZJGzdKOnElHKo/XAS
+QyYufN4MqG2GkDWrSFgpl3IKo3+EXgvsXfnaLs9TqJRpSFgoqPlyolaarptF70KH
+EDLtdpQZLMjOwGrw79DE0xPng9Sslqh6H5Z3zPkm0pF9Tm95gBzurPELSKysAabs
+6Ao/0l2BWArbUW/gn9n5MnYljHSTL/nyoLxWT+D93IH8CWiqpMLH8OTk+qbHYFHP
+0ZEdrKcyXBYnEt8c4ahHJLq3P3ZWNKM6IOVEiOrOlTaQKM3cCMybom3AJds5UYAA
+OBF+ci0kIuvPUr3pTAovZgT7x/S9LlskBvrqxilxQDNf8BqVfZCMJ7z/ufNoG23j
+aoDZ1pBS1oQXmHJLHAihRAPLV8p5k1a16HK42/V1z6dB7wbbL9+ZMQvbPJH+nwKf
+5RqyTKLgXbb2rZdR/0HXcAV7D91Kc8MYnW5JiyyVhUjdWbvzOpcZUhvS5FgQ8bxV
+Mud0GAokA3vwlw9uRkcz83TTs25PJbQqeA1fTDDpd9rQPVaW0Emz5NX3eW6ALAyz
+PPnu6g7JZyDjClTofPqdXQvTenGyQzMgCd+RbGh3yqSbhN564bYqYAOeWsNpg2Ka
+O9B9hVHsL4YUpHXpNcTFGVLBgpgh/z8BQsbqr2f7yOAEpmNIItnAkaMJReGFweSU
+WXl3ad8niRNw1HUvX4UCDAPiA8lOXOuz7wEQAINPNMNNyaB6g1uZ3WZ71HK1NiIW
+sW+YFcVw2eEz+FwQ+NzXZ1pg4wm8aCGPeEMX3gtUTf9Vit60WvEUUERspKu7a6q7
+VnQuxghLrwVUsK3poPhhGrufAjta61h/xWuiYpd06mCrUokZ+SgsmL6BVis0qt6C
+0d7J0/J2gBsQFjt9x6Y1xXGkkNvLawCVGiWjPhTD0N8NHu16FIwKP8tpb3mBOFSq
+8OCU12wdKeG7LhSpwx/44tXtc2yYrbrgNsMUy9rgm68Hues27XkAwXKp+Ho0/oiM
+z0jzLEBmRP4ypcd2f52ZscWaRsLdRmo1yFNO0GvdNjTPPG+KHSKJACINCws5F+g6
+PEE18+jYzSmiPF6IQPTr+6URtVZrrKfpR5sQPK5dH3X+j0tp3B7VhIJVCCUDhXOi
+32YlWN5bPFzlhK+tZsI7xCzsKSbYLuEWU8pdya5rHGeUVYC8WaGUeT7QypxOqqju
+O2TS1xO+M9Rw/p+6f3+TAAiK+b19eBvfcaw+VOJOFWF3C9hDS1A9BoqczH2IE8hc
+VRtrDHuFiBQkJN6ZWsRbfoBLoqkhPnLCVXk8DZeSAK0nnx+CyQH/J2VWD8EAniY9
+7KHxAVn6CDzRVNHIQApNHlB3PqmHRRiAbrJ6OFCU+W59JhMwo7PRqht/myAlVJWH
+U/v23s5HQoAQ6HEY0uoBqlDbB/8/6gpCFfrFbc1/V1v9W1d5TwUmZgxgp/Z88gqT
+c2sGam1fJ+9B1uhs5HAIyY5Rte0jl5sqkqlLzMjZzGSsQohlTttRPoKfXJXZMhc3
+OOrQTHeknsY3IxcrQqHS7EBmFsNFM8hBh8XOAAIzoGol0toup8NgFxMZAF3S+E7h
+1fPbhT1mNf/7qrMMAOs6kfOvKRSyBeZNWWcckLnfQf51mJzq9sPe5z29WkFOHyNs
+3bRdOo6cxlD+XpcM0W7wUAZKIcoJqp8oPhv1zJ+Id3dLY+01hfI+/hnMc5BgTwDi
+kIBWRwriQX/fFLNseKIiWjMtL6lc0ypf5hz9o1GG96hmvkLt1KUwOZOkmy+/z4Cd
+jqLz5+o9vvX4CdAqzealgu1Q8y655OC4jvPSqC0qZM7A07HnLuAWOIibqsgDDVta
+R08ewj9DChiQgx2x/3RlerhbEMyIlZTz9/3v62cLnYL3GIpfH83QAjcKpuii8sc8
+NC18ZlvjfGYP/Lp2KM9aI7glmpY9H8AXacTbxIk7xYUbsPCKWyVLXovKAShiWEcw
+/1hdySlE8eO7FDFXbnNH+JatJxwmaFWLin18hO1r2vmLqvgu2oSjJR+nXlhsLkiT
+qRerXzhHN2gpGki5W91zaUsrrFdofCjzjhkd/l3+WwrWvioYtLu5rNXnuX9P9X9d
+Y1LVuZlsTAhajUgYtFO4DBdMBhx31/mVsPiHgbeMDaXdPMGTLaraAwpZWVd61ee/
+Z7lIc5Zk2yDhjOwuQoy/zaGjhtzt8dThJvcmgCAIewXmXQAv2xIkzSJHaNvHxDhV
+ASpcptFKJjvL/5atbC06OB7ybubbIfKAD2svZpPgH4ebdSnMjYkpsh1dBXk9yFC8
+5yWjFXB/+DM5kPwZiO8AQhOV0aPc+0WXo7pB4yLetiqU4yxQwSqi4hueF1aM8Wmz
+UpN8WosP9B8iLlit1gbtO2+6ugPXVNwF4GyQM4EzA7PD5AKgqPhG+8oS3/X7BGHu
+wlG1UmnS67KkhuhHSnNRStPKo/McIYaEgz3PFKjOtZIvItRVlzuV6f90Rbs7Wpoj
+fCTc5SxFaJ0elqppuSwuxsrlgzCStNauh8k3kJvFzp/YGMPyTYabhdjF4UoMlRlt
+EJtRMaofVGazZql3QuWGz7TF+rjx4P/LEkYw3Xkf2n7XjMDbsJpisav4Q29SJkx3
+MD7ywKmfn1WB21pEzHubeqLzTq17RotI92V+xANTrwk6I6icN1qaD0wFJ4mzL4KT
+LjabM7lUHTBitDMUgpVH9LwhBIpWThoZ91xAI0SeeTCBUF1hakXVN4OHcl2WOgFV
+6xylPsCfuHGO2hKQuy/uOZZBMbgna8byYEFGOEqAwJgMBX/gEqVmSACYKMw1J2Rg
+iqB/O7E7MSWQk/VP/1NMeFUMGMZcANXnyRunwbyMLBikOgLsDetk41X+41NqR9RD
+hSn0vExsbY4+xajGNt13NT/15CPWvvqAxqTPNbqw5q1GDzuB42MrZbAFlBRQ6k7Q
+1qY//CEtP3HhGlWQ3UBZkWKcZo0tdogePAYXlutG2kyTdu7NIac2sFK5qzl6VxwM
+CYLGNV6wRuiLJrFF7iosxhcUz6T1fbmPlYD1MDSso+hOBFnOtBMBVsOBgBZm+esW
+VO/AGo1ekltuOZM27E2R6TdZfpPnhl0PQzsYcqg5XRjr8NmV2A1S4HODft8nGr/W
+XlM6xyLke/bTYt1SP0Cr5nXbmN867wDkHXJpeBUp1ece8r4m800+kr953vrUqs8n
+m8KNS2LwVL4i9uhpuvtvqbQ1UKtBL6lHHVwCKhlMfgMKz5A/9JyxOA==
+=oakZ
 -----END PGP MESSAGE-----