Offline key handling for Crypto

[yaronyg]

It's important to not do anything interesting with public keys with a process that can be directly reached from the Internet. So ideally we will do things like root key generation and signing in a stand alone process running on the device that can't be directly reached from the net.