Ceph

Currently the mon. key is part of the internal mon auth database. It can't be modified without a running mon cluster. It's also an awkward bootstrap process to initialize it.

Instead, move the mon. key to a normal keyring file in the $mon_data dir, like all the other daemon types. This will make changing the keys a simple offline process.