Add support for passing Config ID as CredentialSpec

Adds support for passing a config ID as the CredentialSpec source. Also
lays the groundwork for future uses of secrets and configs in places
other than mounted into the container.

Signed-off-by: Drew Erny <drew.erny@docker.com>

api/api.pb.txt

@@ -3824,6 +3824,9 @@ file {
       json_name: "mode"
     }
   }
+  message_type {
+    name: "RuntimeTarget"
+  }
   message_type {
     name: "SecretReference"
     field {
@@ -3878,6 +3881,15 @@ file {
       oneof_index: 0
       json_name: "file"
     }
+    field {
+      name: "runtime"
+      number: 4
+      label: LABEL_OPTIONAL
+      type: TYPE_MESSAGE
+      type_name: ".docker.swarmkit.v1.RuntimeTarget"
+      oneof_index: 0
+      json_name: "runtime"
+    }
     oneof_decl {
       name: "target"
     }
@@ -4055,6 +4067,14 @@ file {
         oneof_index: 0
         json_name: "registry"
       }
+      field {
+        name: "Config"
+        number: 3
+        label: LABEL_OPTIONAL
+        type: TYPE_STRING
+        oneof_index: 0
+        json_name: "Config"
+      }
       oneof_decl {
         name: "source"
       }