don't allow passphrases longer than 50 characters