### Added

  - `derivepassphrase vault --config` now supports an `--unset` option which
    unsets any given named setting prior to applying any other configuration
    changes.