::: derivepassphrase.vault options: heading_level: 1