Get by key id

This adds a get-by-kid to both backends, and includes a bunch of tests for both to validate it's at least minimally working as expected.