server
   allow batch pub key query
   signal clients on file change so they can autopull
client
   push with async encrypted
   re-uses pub/pri keys
   push without $HOME/prefix
   push to all pub keys
   auto-pull

done
   server
      stores with targetID
   client
      push to specific pub key