Credentials encryption / decryption SPI

Some credentials need to be stored in a database. Keycloak needs to support pluggable interface that would support encryption/decryption of the credentials so that it can delegate encryption / decryption to an external provider as well as other aspects like e.g. key management.

Reference: https://github.com/keycloak/keycloak-community/issues/10