Security fix: duplicity handler used to put the gpg passphase on the command line.