Move tail id allocation to API

Globals are evil.
Update to latest node-convict
Add a tool to generate secrets and require them
keytab -> serverKeytab

Also move the tripwire to server.js
Bump default session token lifetime to 30 days
Add code to use daemon principal

Renew tickets regularly.