[th/keyfile-cleanup] some cleanup of keyfile code, add "warn" hook for writer

my original intent was to extend the writer with a hook to suppress/mangle passwords. If we had that, we could replace our use of nm_utils_log_connection_diff() in syslog logging (which has problems with complex properties).

This is how far I got... just a few cleanup patches on the way.