Add the option to create a KMS key for signing of pipelines

[wolfeidau]

This change adds the option to add a KMS key to the stack for signing and verifying of pipelines. Setting this to a keyspec will create the key and configure all agents to use this key.