Don't cache stuff in sensitive files

Discovered pass(1) was saving backup, undo, and swap files in plaintext
on my machine. These settings stop it.

Also gave an existing augroup a nicer name.