security: Make the KeyChain constructor take an IdentityManager.