Database encryption uses passphrase entered at startup