Compare a valid passphrase against "<?xml ". Skip the version string