Update deps

ReadMasterKey: strict tpm option match

ReadMasterKey should return an error if the TPM option is selected,
but the master key was created without the TPM.

Add TPM option for master key (#1)

Add an option to store master keys on a TPM. When this option is used,
the data can only be decrypted with the same TPM.

Add Keys() and DeleteKeys()