use TREZOR as passphrase to check protection