cryptfile: revised i/o callbacks
combine bin/keyagent_[gs]etpass into new bin/keyagent
ignore emacs backups