when changing credential/request owner, must unprotect private key first
added TimerServiceManager and implementation
added private key holder and implementation
added rollback indication to application exceptions
renamed protection service beans to match new convention
fixed broken unit tests
make UI interactions allow for cached private key