Use nix-exec fetchgit instead of fetchgit-bootstrap
ipsec-wrapper.nix: Update to nix-exec
Update README for nix-exec
Add secrets infrastructure

Fixes #9