core: explicit root keys for identity

Replace threshold on identities with a roles dictionary, where the only
currently supported role is "root". Keys in the root role are eligible
for identity document updates.

This allows users to restrict identity edits to keys on secure storage,
while still permitting signatures from weaker protected keys for other
purposes.

Signed-off-by: Kim Altintop <kim@eagain.io>

0 files changed, 0 insertions, 0 deletions