Currently you can specify the password in a tlclient configuration file. This is used to facilitate integration with other products, allowing them to do SSO with tlclient. We do not have support for passphrases though. Should be easy enough to add using the same system as the password.