cli: ask for passphrase when removing or renaming label

Even though rename does not read the encrypted secret, as long as the
private key is in use, it should ask for passphrase.

The remove operation allow only the one that know the private key can
modify the issuer.

1 files changed, 10 insertions, 0 deletions

diff --git a/cli.go b/cli.go
index e3b6d77..34127ca 100644
--- a/cli.go
+++ b/cli.go
@@ -205,6 +205,11 @@ func (cli *Cli) Remove(label string) (err error) {
 		return fmt.Errorf(`%s: %q not exist`, logp, label)
 	}
 
+	err = cli.cfg.loadPrivateKey()
+	if err != nil {
+		return fmt.Errorf(`%s: %w`, logp, err)
+	}
+
 	delete(cli.cfg.Issuers, label)
 
 	err = cli.cfg.save()
@@ -285,6 +290,11 @@ func (cli *Cli) Rename(label, newLabel string) (err error) {
 		ok       bool
 	)
 
+	err = cli.cfg.loadPrivateKey()
+	if err != nil {
+		return fmt.Errorf(`%s: %w`, logp, err)
+	}
+
 	label = strings.TrimSpace(label)
 	label = strings.ToLower(label)
 	rawValue, ok = cli.cfg.Issuers[label]