- enable gpg protection
- remove set -x to prevent logging password
- add checks to prevent re-initing pass and gpg
- present passphrase unlock via docker env variable
- Note: gpg-agent will not expire gpg-present-passphrases
- fix deb CMD to ENTRYPOINT