VM Integration

Currently it is very manual to get secrets to vm's. You have to create service accounts and without secret/container level permissions, whole tenants. You then need to get credentials to the vm somehow.

If its hard, users won't do it, and will end up doing bad things like simply putting keys in the nova metadata.

There needs to be a much more user friendly way of letting vm's get access to secrets stored in barbican.

The spec will specify exactly how this work.