Sketch some APIs for the key management backend

We should write down what APIs are needed for #728 (closed), bearing in mind what we discussed on #tor-dev: keymgmt.log