Feature/soledad adbapi3

DO NOT MERGE YET
just for testing / pullreq purposes

Hmm. Maybe you *need* to rekey if you discover that your previous passphrase (which was used to derive raw key) has been compromised.