And how would you ensure that the passphrase isn't transmitted upstream by a modified js-client?