One way to avoid "temp file with clear text" hole is to use a pipe, so the clear passphrase is only somewhere in kernel memory, not on the disk. With dialog used in the script, the problem is that it ...