WIP.  Robot account proposal.

In a rough state but putting out for comment.

There has been considerable discussion about the general problem of secret distribution for docker and kubernetes.
While that is a great goal, I think it will take some time.
In the shorter term, I want to be able to just distribute secrets for access to the kubernetes API.
This proposal just focuses on that.

That problem is important to solve because:
  - it lets us run scheduler and controller-manager via /pods
  - lets users write their own services, like cron, build controllers, etc, more easily.
  - gets us closer to self-hosting.
Known location is going to have to be something in the FHS system, and it's going to be really, really tough to do this right across all images.  That being said, if you want this you should support where we put it, so not a huge issue.