refactor plugin pattern

authorization is moved into core,
plugins are coupled less to each other.

all crypto is from ssb-keys.

oops I forgot to merge your latest i think, I'll fix this but I gotta commit this before I have to move...