Encrypt DB key with hardware-backed key when available
The database key is encrypted with a key derived from the user's password. This is vulnerable to brute force attacks; scrypt makes them more expensive but doesn't prevent them.
When a hardware key store is available, we could add another layer of security by encrypting the database key with a hardware-backed key as well as the password-derived key.
Related to #257 (closed).