Continuation of the `docker secret` storage feature

Closes https://github.com/dotcloud/docker/pull/6075

Starting on a new PR to accommodate alex being on holiday 
how does this work? what does committing a granted-secret container mean/do?