pass ... but vault :)

• Files are formatted with shfmt
• It must pass shellcheck

License: GPLv2+, and some pieces are from Jason A. Donenfeld [email protected]'s pass.