This avoids a potential problem where the app crashes after adding the contact but before adding the transport keys, leaving the contact unusable.

Whether or not a class needs to run as a service is an implementation decision.

1. The things we're really trying to protect - contact identities,
message contents, etc - can't be erased from memory because they're
encapsulated inside objects we don't control.

2. Long-term secrets can't be protected by erasing them from memory
because they're stored in the database and the database key has to be
held in memory whenever the app's running.

3. If the runtime uses a compacting garbage collector then we have no
way to ensure an object is erased from memory.

4. Trying to erase secrets from memory makes the code more complex.

Conclusion: Let's not try to protect secrets from an attacker who can
read arbitrary memory locations.

The TransportReader/Writer's dispose() method should handle that, and
ConnectionManager is responsible for calling it.

Fixed a bug in SimplexMessagingIntegrationTest that should've caught
this.

This allows the oldest LocalAuthor to be used as the default.

The distinction between inbox groups and other groups can be maintained
internally, there's no need to represent it on the wire.

Private messages are now the same as group messages, but groups can be
private or public. When a contact is added, a private group is created
and designated as the inbox for exchanging private messages with the
contact.

This produces a saner user experience when devices have differing
clocks.