Family OTP helps against passphrase leakage