add gpg passphrase verification so that we fail-fast if i fat-finger my extremely long and complex gpg passphrase