Make support tunnel tolerate running in a read-only FS scenario

Occasionally, filesystems will go read only. It would be extremely nice if the support tunnel had a fallback mechanism to search for an in-mem database and use that as the backing store for cryptographic data. 

Reporting this now because it would have helped in a specific customer instance.