agent: split keyring functionality out of agent.go
command: allow wan ring to be modified separately from lan pools