pub fn resolve_auth_for_init( passphrase: Option<String>, generate_keyfile: Option<String>, ) -> Result<VaultKey>
Resolve auth specifically for init (no vault exists yet, just get the key).