It would be useful to be able to prompt for a passphrase before starting a build. Storing the passphrase in credentials.xml is not really acceptable for us.

It's possible to emulate this using a build parameter and some shell, but it's not pretty.