HADOOP-10141. Create KeyProvider API to separate encryption key storage from the applications. (omalley)