The text a20e534a68c9, as FreeBSD 12.2-RELEASE shipped it.
get a passphrase from the user
readpassphrase(3) on FreeBSD now