Implemented password rotation (except for passing the pwd table to unseal)