Add encrypted json support for orchestrator bls keys instead of plaintext

[RonTuretzky]

this will be an encrypted json in production, we need to add decryption / remote signer integration in a future release

Originally posted by @RonTuretzky in #95