### Added

  - `derivepassphrase vault --export` can now also export the current
    configuration as a POSIX `sh` script, using the `--export-as=sh` option.
    The default (and previous behavior) is `--export-as=json`.