[Keybase] HashiCorp Vault support as a keybase backend

[Olshansk]

Objective

Add a more node-operator-oriented, production-ready backend for the keybase.

Origin Document

The implementation for the CLI & keybase are available at app/client but only supports a filesystem-based key based backed by BadgerDb. Example from /Users/olshansky/workspace/pocket/pocket/app/client/cli/account.go:

	// Open the debug keybase at the specified path
	pocketDir := strings.TrimSuffix(dataDir, "/")
	keybasePath, err := filepath.Abs(pocketDir + keybaseSuffix)
	// ...
	kb, err := keybase.NewKeybase(keybasePath)
	// ...

PNI and other major node runners make use of HashiCorp Vault which makes it a great 1st candidate for an alternate keybase backend.

Goals

• Leverage the existing keybase utilities & interfaces for production uses cases
• Make TestNet keybase management easier for PNI and other node operators
• Add support for HashiCorp Vault as a keybase backend

Deliverable

• A PR that enables using Valut as a backend for keybase management
• A flag or configuration allowing the user to specify which backend they want to use via the CLI
• A document explaining how to setup HashiCorp Vault as a backend

Non-goals / Non-deliverables

• Adding new commands to the CLI
• Modifying the core node business logic

General issue deliverables

• Update the appropriate CHANGELOG(s)
• Add a README w/ relevant documentation & mermaid diagrams on how to use this for keybase management

Testing Methodology

• Instructions (e.g. a demo) with a video and list of commands showing the functionality in action

---

Creator: @Olshansk
Co-Owners: @h5law @okdas @jessicadaugherty

[jessicadaugherty]

If this is in M4, does that mean it's a priority to include in testnet @Olshansk?

[Olshansk]

If this is in M4, does that mean it's a priority to include in testnet @Olshansk?

Not a blocker for starting TestNet, but will make it more efficient, simpler and easier to incorporate external node runners (e.g. if we do an incentivized TestNet).

Might be a good alternate to #194 (comment) but will keep thinking of other starter tasks too.

[jessicadaugherty]

Great, thank you @Olshansk! Was weighing the impact of this over the threshold sigs.

[jessicadaugherty]

Hey @Olshansk can you provide an effort for this? Seems S-M but want to confirm.

[Olshansk]

Hey @Olshansk can you provide an effort for this? Seems S-M but want to confirm.

I think the effort to test & integrate it with HashiCorp is a fair amount of infra work: making it easy through documentation or tools for other to get set up. I set it as an L