Instance-isolated identities

This update adds automatic enforcement of instance identities, preventing one instance from using the gpg-agent cache to access secret keys which aren't associated to that instance's key. This check is enforced by the passphrase attribute. If a user creates instance identities with the same passphrase, then this check can be side-stepped.