add passphrase callback
incremental updates
fix build on systems with nonstandard paths
clean up key import/export names