R1:a5402c46b2b9

Improve passphrase.query

Summary: Fixes T8070. Fixes T8071. Modernizes passphrase.query to support "order".

Test Plan:
- Saw description in results.
- Queried for destroyed credentials with "needSecrets=true".
- Used "order".

Reviewers: btrahan

Reviewed By: btrahan

Subscribers: mikn, epriestley

Maniphest Tasks: T8070, T8071

Differential Revision: https://secure.phabricator.com/D12715