allow non-interactive --keygen usage (with empty passphrase): --nopass