Block a user
Bug: Non-darwin KeychainUnlocker stub panics instead of returning errors
Bug: Init command writes longterm.age twice, second write overwrites correct encryption
Security: DecryptWithIdentity leaks plaintext in unprotected memory
Bug: NumSecrets() always returns 0 due to incorrect directory traversal
Bug: getLongTermPrivateKey hardcodes derivation index 0 for mnemonic path
Bug: FindExtraFiles reports manifest file and dotfiles as extra