Package cmd is essentially the main() of the secret volume service.
It is a separate package to allow convenient use of Go build tags to control
debug logging and system calls.
Run is effectively the main() of the secretvolume binary.
It lives here in its own package to allow convenient use of Go build tags
to control debug logging and system calls.