Support for offloading private key in eth1 mode

[prestonwindfeldt]

We can either expand reload API to optionally offload and reload all keys OR introduce a new API endpoint to offload certain keys only.

[jframe]

This should be fixed by #1018