Have systemd populate keyrings at boot from UEFI-stored material

[chucklever]

Systemd has the capability of extracting blobs from UEFI and stuffing them onto a keyring: systemd. TLS-enabled storage tools can then direct tlshd to a particular key and/or keyring to obtain authentication material instead of tlshd reading it from a file.

Related to #30