Setting up another data czar

@shnayder  @mhoeber @WatsonEmily @stroilova : now that it is possible to add a second data czar, best practice remains to have just one at a site, but to add a second data czar rather than have them share a single passphrase