auth/credentials: Make cli_credentials_get_aes256_key into generic key access