Encrypt DB key with hardware-backed key when available

The database key is encrypted with a key derived from the user's password. This is vulnerable to brute force attacks; scrypt makes them more expensive but doesn't prevent them.

When a hardware key store is available, we could add another layer of security by encrypting the database key with a hardware-backed key as well as the password-derived key.