keymgr: First steps towards path validation and permission checks
This adds a Mistrust param to the ArtiNativeKeyStore constructor and slightly changes its semantics (it now creates the keystore dir if it doesn't already exist, or, if it does, validates keystore_dir according to the specified Mistrust settings).