bug: exit `--passcmd` failure cleanly

[cafkafk]

Currently, e.g. if pinentry fails, morph will panic and show a trace. This could probably be cleaned up to be more user friendly