Continuation of the `docker secret` storage feature

Closes https://github.com/dotcloud/docker/pull/6075

Starting on a new PR to accommodate alex being on holiday 
s/temporary/private/ ? as in `mount --make-private` ?