I'm stumped what exactly is kpgp/gnupgp looking for in a "valid" passphrase?