This is tricky. If that single passphrase is mishandled, all of your user's data at rest is now vulnerable