Any reason to not just set the encrypt key as the primary key in the key ring? I imagine that generally -encrypt is provided with the primary key, and the -keyring-file is used only as a temp store while keys are being swapped