handle 64-character limitation on passphrase correctly

 * The 64-character limitation *excludes* the terminating null-
   character.
tests - more!
tests - improve cleanup flexibility