Good suggestion. 

Just wondering can I expose the passphrases via the envVars property of the keystore.Keystore or do I need to set them in the script itself?