get gpgpassphrase at init of edit-crypt;
try pubkey otherwise use expect for ssh;