Move restore-last-tarsnap-backup to src/db.
Use archive named last-backup and read keyfile from config.