The spec should make it clear how key commitments are stored and retrieved

[johannhof]

It should be easier to understand how storage for these objects works, i.e. by defining a data structure for a key commitment and how the browser would store it (e.g. mapped to the issuer origin?)