add support for pem passwords