RentalBotClient wraps a KVStoreClient to expose methods to handle tool rentals.

SecretKeyKVStoreAPI implements the KVStoreAPI interface, and that hides the plaintext of entryKeys from Keybase servers.