make usage of PassphraseSecrets easier as the default impl in the handler
generate a 256 bit AES key

with upcoming sqlcipher+iocipher support, they'll want a 256 bit key
so we might as well make this the default for now.