Initial, untested, better support for hiera-gpg.