add gpgx, a decryption wrapper for running commands against encrypted files