Add CORE_TLS_SECRET configuration

This secret will be used to encrypt automatically obtained secrets at
rest, i.e. in a storage. They will be decrypted on demand. If the
secret is wrong, stored certificates can't be decrypted. For changing
the secret, the stored certificated must be deleted first in order
to obtain new ones that will be encrypted with the new secret.

slices/diff.go

@@ -0,0 +1,28 @@
+package slices
+
+// Diff returns a sliceof newly added entries and a slice of removed entries based
+// the provided slices.
+func Diff[T comparable](next, current []T) ([]T, []T) {
+	added, removed := []T{}, []T{}
+
+	currentMap := map[T]struct{}{}
+
+	for _, name := range current {
+		currentMap[name] = struct{}{}
+	}
+
+	for _, name := range next {
+		if _, ok := currentMap[name]; ok {
+			delete(currentMap, name)
+			continue
+		}
+
+		added = append(added, name)
+	}
+
+	for name := range currentMap {
+		removed = append(removed, name)
+	}
+
+	return added, removed
+}