Hsmdaemon: add decrypt option

[sharidas]

Idea

• this is mainly for testing and to double check the hsm setup works correctly. maybe an encrypt command makes sense as well so that the admin can try the setup on the cli ... which goes with seperating hsm.url from crypto.engine.

Reference/Origin of the idea -> #90 (comment)