Check in sample .cloudkeychain file from agilebits
mostly-working support for cloudkeychain key derivation
more reorganization
fix some bugs... integration tests still don't work