- keygen no longer crashes on OpenBSD when prompted passphrases

  do not match

ss v0.9.0

- Add unveil(2) support when built for OpenBSD
- Pledge promises are reduced from the original set where possible
- A crash during chpass OpenBSD was fixed by removing a chmod call

ss v0.8.1

- Fix build for non-OpenBSD targets

ss v0.8.0

- Add pledge(2) support when built for OpenBSD
- Go module now declares Go 1.17 target
- Updates to 3rd party dependencies

Bump x/crypto for blake2 .s stack corruption fixes

chpass has no comment flag

Implement chpass command

Record (and require) argon2id threads in secret keyfiles

Don't reassign io.ReadFull error after Seal

Similar to the previous commit, we shadow the error in the l > 0
branch during encryption so that the outside error returned by
io.ReadFull is not overwritten.

Don't reassign io.ReadFull error during Open

The error inside the l > 0 branch is now shadowed, so as to not
reassign and lose the error return from io.ReadFull.  This prevents
io.ReadFull from needing to error twice (once with data, the next
without) before Decrypt returns.