Of course, you should want to protect the password itself in 'pass' because that's the best password store there is :-)