Clean up some variable names
confirm_input() use parent local variable
Function block with local variables, not subshell
Only take chgpw args on command line
Wrap decryption in a function

This makes it easy to retry failed decryptions. Relies on a local
variable declared by the caller
Wrap encryption in a function
Comment
confirm_input() takes an optional argument for naming input
Indentation
doh
Use temp file for for chgpw
Let gpg read the secret...
Remove bad functions
Use heredoc to protect decrypted data

Using a heredoc as input to gpg keeps the decrypted info off of a
command line and out of ps
Merge changes from clean branch
Merge branch 'clean'
Explicitly background the timeout function

Just to remove some indirection in the code
--force-mdc for gpg
Use a swap file for changing encryption passwords

This file contains the re-encrypted data. It is moved over the old file
on successful exit by gpg