Okay, after Damain fumigates Broken Valley, I found a door that requires a password- Needleman's Vault (next to a portal that leads to Stone's fortress).
Iirc, Needleman is the tonic-peddler with the anti-mindreading helm in Black Boar Inn.

the question is: how do i get the password outta Needleman's noggin?

on an unrelated note- how do i get into the Church's Cellar- the locked door by the cemetary?