Add envelope
safe: initial append-only password support