make DAA optional

[rlin1]

Today every user needs a DAA.
We use it for consent gathering only today.

We could use that as well to implement a full wallet (replacing the cloud wallet). That would also allow offline use cases (even though device migration becomes harder).