Manage passphrase for rpm signing

cc @opscode/release-engineers 
We might want to mention the [omnibus::_packaging](_packaging) recipe does this sort of prep.