master credentials sharing

[stelcheck]

• dawn --export: export credentials for an environment to an encrypted tarball
• dawn --restore: restore credentials

The export should have a small wizard to select which credentials to include. For instance, we may wish to backup everything to cold storage, but share only some vault credentials amongst team members.