Move secret key processing to the keymgr library
Add a secring Purge function
Add support for key generation and expiration

At the moment expiration is performed on every server startup and
written to a backup file.  To overwrite secring.mix automatically
would be bold!  Other options need consideration.