clean up readPEM/writePEM stuff (incl. some exceptions); invalidate passwords in PasswordCache when read failed(!)