Provide control port commands to ADD/REMOVE/VIEW v3 client-auth

We need control port commands so that TB can add/remove/view client auth credentials.

Furthermore, the 'add' command should be able to decrypt any existing non-decryptable descriptors in the cache (see #30382 (moved)).

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information