Investigate the use of systemd credentials for non-administrative passphrases

The alternative would be passphrase files.