Key Management Isolation

[ehanoc]

Maybe would be worth to discuss this as it's not obvious from me from the conceptual architectural. I'm suggesting that isolation (& security model) should be one of the principles of a proper "wallet" (a.k.a key management system) and there might different strategies and mechanisms to achieve this depending on which environment we have to run one. Also might depend if we have (or not) a TEE, hardware-support and if it supports (all or just some) of the crypto capabilities that our application requires.