Add readpassphrase utility.
Implement pbkdf2 in KDF code.
Allow password based encryption.