add key shielding to protect private keys at rest in RAM #89
Description
Add key shielding to protect private keys at rest in RAM against speculative execution and side-channel attacks.
Will presumably require a R/W key locking mechanism that is also needed for key rotation (#19).
Will likely result in a substantial performance impact, so this must be configurable (#58).