Simplify re-encrypt logic

Want to introduce the ability to decrypt with an arbitrary key so we can convert from one v2_key to another. First step is to simplify the recrypt chain.

- separate auth_model_spec and auth_config_model_spec
- consolidate fix_auth#hardcode logic with recrypt logic


https://bugzilla.redhat.com/show_bug.cgi?id=1159009

/cc @jrafanie @Fryguy 
I can't tell if the :typ matters here... It seems like having a good or bad password is the main difference here.  Why do they have different :typ values?