bug with secure passphrase