Also, missing RUN_DEPENDS on it; not strictly, because security/passwort-store pulls it in, but relying on transitive BUILD_DEPENDS are a little bit fragile. ok kn@