42a43,48
> When asking for the password interactively, pem_passwd_cb() can use
> B<rwflag> to check, whether an item shall be encrypted (rwflag=1).
> In this case the password dialog may ask for the same password twice
> for comparison in order to catch typos, that would make decryption
> impossible.
>