treat principal public key as opaque string

The Persona spec says that the public key in an identity assertion
should be serialised, i.e. a string.  Although we could check its
validity just keep it as an opaque string for now.
complete provisioning script