documenting our trouble with (and possible approaches to) handling passphrase-locked...