enumerate credentails as env vars stored in a tree structure as sketched in #1
the presence of these structured env vars serves as an interface for how jackrabbit instances finds credentials
provide ./bin/fetch-credentials that acts as default impl. to satisfy this interface. it could:
fetch all jrp-related credentials from a separate, encrypted repo
decrypt them with blackbox
put them in the right place and source the right files
NOTE: at this point we can remove everything black-box related (except the program itself -- ie: all metadata about our keys, etc.) from the jrp repo
users may override this by re-implementing (or simply load env vars manually (via scp or with some other "entry level" option we could provide as a script)
[stub]
jackrabbitinstances finds credentials./bin/fetch-credentialsthat acts as default impl. to satisfy this interface. it could: