Maybe state that we don't support passworded keys used in a service and if we're running as a service and the key is locked, run in insecure mode?

Or get the user to attach a mind reading apparatus to a COM port and read the input from that.