support passphrase for private keys