a user can add blacklisted passphrase