v1.23.0: Launch-time credential choice and encrypted backups

Templates can offer a set of credentials to choose from at launch, so one preset covers many targets. And the whole control plane can be backed up to a single encrypted file and restored anywhere, including onto a different database.