#
# Decryption with password file. Use it with caution.
#
# Password  file  should  be  created  just  before  running
# atob  and removed  just after  (you can  use PRE  and POST
# commands).
#
# Please note,  if you store  the file on  normal filesystem
# then simple  'rm' is not  enough (it is still  possible to
# find out the password). Maybe tmpfs could be the solution?
# Or encrypted filesystem?
#
# Verbose  and restore  commands can  be performed  in other
# directory  than afio  is  run, so  path  to password  file
# should be _full_ path.
#
DECRYPT_CMD_OPT='-U -3 3 -P $ENCRYPT_CMD -Q --batch -Q -r -Q $ENCRYPT_KEY_ID -Q -d -Q --no-verbose -Q --no-secmem-warning -Q --passphrase-fd -Q 3'
VERIFY_CMD='afio $VERIFY_CMD_OPT $BACKUP_FILE 3</somewhere/hard/to/access/enc-passwd-file'
RESTORE_CMD='afio $kESTORE_CMD_OPT $BACKUP_FILE 3</somewhere/hard/to/access/enc-passwd-file'
