secrets-management

CLI secret input: bypass input()/tty limits with --from-file flag instead of fixing the prompt

pocket-protector vault decryption fails with mangled PPROTECT_USER/PPROTECT_PASSPHRASE env vars