Add `KeyManagedEncryptedEnv` API and related `EncryptionKeyManager` trait.
Signed-off-by: Yi Wu <yiwu@pingcap.com>