@sash set a separate pin for each key to unlock the dreaded 12-factor auth