Returns a defensive copy of the cached passphrase for keyId, or null when absent or expired (expired entries are cleared).
null