Expand description
m4a-agent vault <status|backup|restore>: the owner’s way to look at, save and move the key
vault of M4A_STORE_ROOT.
status: where the master key lives (file+keyfile,file+keychain,file+envkey) and how many entries there are. No label values.backup --out <file> --passphrase-env <NAME>: every entry, encrypted under the passphrase held in the environment variable NAME (never on the command line). Refuses to overwrite.restore --from <file> --passphrase-env <NAME>: writes the entries into the active vault.
To move a vault to a master key from the environment (M4A_VAULT_KEY_ENV names the variable that
holds it): back it up, move the old vault.enc, vault.key and vault.home aside, set the
variable, restore. The identity and store keys come back; copy the session store directories
along (they are sealed under keys the vault holds).