https://blog.frankleonhardt.com/2016/why-passphrases-are-a-bad-idea/