Check for gpg.
Remove rotate-key command.
Separate command for hash.

Getting the hash from Octopus becomes a subprocess call.
Also, checking gpg is a function.
Use /dev/tty to get otp.
Block on piped secret input.