make passphrase optional for pubkey authentication