make DAA optional

Today every user needs a DAA.
We use it for consent gathering only today.

We could use that as well to implement a full wallet (replacing the cloud wallet).  That would also allow offline use cases (even though device migration becomes harder).