Similar to #7 periodic rotation of master passphrase (initiated by user) will reduce the amount of potentially compromised data.