subcommand to change (or remove) password on secret keys?
There's currently no way in sop to change the password on a secret key. Nor is there a way to permanently unlock a secret key (rendering it with no password at all).
Do we need a new subcommand (or two) to do those things? how do we let the user distinguish between the password(s) needed to unlock and the new password?
Some possible syntax if we just want one new subcommand:
# adding a password to an unlocked key:
sop change-key-password --new-key-password @ENV:keypass < unlocked.key > locked.key
# removing a password:
sop change-key-password --old-key-password @ENV:keypass --no-password < locked.key > unlocked.key
# changing a password:
sop change-key-password --old-key-password @ENV:keypass --new-key-password @ENV:newpass < locked.key > refreshed.keyFeedback welcome!