work with encrypted hsm_secret

[Eternumkr]

allow hsm_secret to be encrypted and poncho to still function.

[fiatjaf]

We would need a way to decrypt it though, so the decryption key would have to live somewhere, which defeats the purpose?

The alternative is to ask CLN to implement an API "sign arbitrary payload" so poncho can call that instead of using the key directly.

[Eternumkr]

maybe i mean like, hsm_secret is encrypted and gets decrypted when lightningd runs. so poncho can still work if lightningd has decrypted hsm_secret?

have poncho do something similar like lightningd where it'll decrypt using a password.