### Added

  - `derivepassphrase` now explicitly supports shell completion, in
    particular including filename and service name completion in the `export
    vault` and `vault` subcommands.