Setting up another data czar rather than sharing a passphrase