Now that we have a keystore we need to add the ability to encrypt it with a secret. Ideally when a node starts up a secret must be passed in somehow.

Some questions we need to answer

• What does this mean for reloading the keystore
• How do we want to pass in the secret securely
• What other secret storage technologies should we support (like vault)
• What happens to node startup if the secret fails to unlock the keystore