- passphrase can be prompted also when wallet is running (thus added to the wallet listener) - device/host decision is now made on the host