fixup: get pgp password through env barrier