Add a comment about using getpassphrase() or readpassphrase() rather