Add API part which simply reads keys from a configured directory
Add worker logic so we can consume tasks
Correctly limit scopes
Add lame purging of secret files
Add basic tests for worker / server functionality
Add key generation to deployment process + update deploy to latest server (first working server)