encrypted OS signing key improvements

static/releases.html

@@ -314,6 +314,9 @@
                 local database backend hasn't been implemented. Various changes would be needed to
                 make it available and to make sure that privacy is preserved.)</li>
                 <li>Settings: fix broken upstream MAC randomization value mapping uncovered by the always randomize option value</li>
+                <li>make_key: use scrypt for key derivation used to encrypt keys</p>
+                <li>add script/encrypt_keys.sh and script/decrypt_keys.sh for handling key encryption</li>
+                <li>improve performance and algorithm support for encrypted keys via script/release.sh</li>
             </ul>
 
             -->