change storage password manager protocol

The management layer cannot be the sole party trusted to set the right
label of the stored data, since it can tell the storage layer tha
the data is for evil.com and thus when evil.com fetches credentials
they correspond to fb.com's.