allow passphrase as parameter