Add passphrase support, and document configuration