SSH passphrase should be encrypted

[mikofski]

AES seems easiest, ideally rsa paired-key using the keys in .ssh would be perfect, but the ssh keys aren't in the correct format, and you need open-ssh to fix them

openssl pkcs8 -topk8 -inform PEM -outform DER -in private_key_file  -nocrypt > pkcs8_key

not sure if there is a programmatic way to do this with Jsch or Java?

[mikofski]

even if ssh keys are converted to java format, they can't be used, it's a catch-22, you can't use the keys unless you have the passphrase, but if the passphrase is encrypted using keys, then you can't get the passphrase. So best to just use AES, this works well with issue #15, since AES key can be daily, which will expire requiring passphrase to be reentered. EG: if the key is the date.