add "never" for ttl for passphrase cache