Add (disengageable) security checks for cryptoconfs and cryptainers

[pakal]

For now we have check_cryptainer_sanity() and check_cryptoconf_sanity(), which do not aggregate errors, but check types and enumerations properly, and raise if troubles.

Optional security checks should be added like, number of layers in data-encryption and key-encryption, to warn about insecure cryptainers.