Support Encryption/Decryption at rest

[sfxworks]

What is the problem you're trying to solve
I would like to store sensitive information on my registry while mitigating worries of it being compromised. I may also wish to store sensitive information on other registries.

Describe the solution you'd like
crio and containerd have methods of decrypting images on pull. I would like the uor client to support passing keys as an argument to encrypt and decrypt objects.

Additional context
https://developer.ibm.com/articles/advancing-image-security-encrypted-container-images/