Initial implementation

Might be good to run `confd -onetime` (with whatever other args) at the end of the tasks as a way of validating the templates and keys