Passphrase handling in encrypt