vault security - password only

[bsutton]

how do we reconcile the post quantum encryption with the fact that the vault is locked with a password? Could we store the private key in the platform key store - how do you open a vault if the platform key store is not supported.