[feature]: Strip/add passwords option

Set as ENV for arbitrary usage on certain commands, or set as own subcommand for broader use?

passwords enabled for pkcs12 by default for safe transfer.

This might be inverted for keys though: no passwords on exported keys by default due to implied automation/server usage bias (already done), create subcommand for adding it back in for client usage as exception.
