Use request_passphrase() for OpenSSL PEM files