consider eventually allowing EKM setup without FORBID_STORING_PASS_PHRASE

[tomholub]

Is setup with EKM also allowed when FORBID_STORING_PASS_PHRASE is not set?

No, we disallow it.

flowcrypt-android/FlowCrypt/src/main/java/com/flowcrypt/email/jetpack/viewmodel/EkmViewModel.kt

Line 117 in 5bb839f

if (!orgRules.hasRule(DomainRule.FORBID_STORING_PASS_PHRASE)) {

respectively to #1168

Originally posted by @DenBond7 in #1761 (comment)

[tomholub]

[tomholub]

In such situation, pass phrase will be stored in db instead of RAM.

Similarly, as per screenshot above, code that updates keys from EKM during each startup has to be updated to use appropriate pass phrase storage method (currently always uses RAM)

[tomholub]

The logic for EKM updates should be: if we had to ask user for pass phrase, then use RAM. If we could retrieve pass phrase without asking user, then use db storage.