added support for %prompt-ing private key passhprases in strokes "ipsec secrets"