BUG: make enstaller.vendor a package.
ENH: using vendorized keyring.
ENH: print keyring backend in --config.