support ask-pass and make keyring configurable