Rewrote config stuff

Now no knowledge of cryptography is assumed or required and there is a
clear separation between application and deployment.

What is remains is the question of whether using json is a good choice,
switching to toml is probably a good idea.