add a note in the readme for the initial passphrase