hw: init now takes an optional passphrase