wip - local storage for passphrase - only makes sense if optional