Opinionated and specific bakery refactoring.

Third party caveats will use NaCl box public-key encryption for encoding
caveat ids. Removing interfaces and layers of indirection.