Debian developers are recommending that the Cryptkeeper Linux encryption app be pulled from the distribution after a universal password was found.