Kernel keyring support would be the next step?
PASS=$(keyctl print $(keyctl search @s user enveil_key))