A passphrase should not be treated as the full security of a key because it can be broken