Externalize GPG passphrase