I wonder if it's a good idea to call `strip()` since the person's passphrase may include whitespace.