{lib, ...}: {
  programs.gpg.enable = true;
  services.gpg-agent = {
    enable = true;
    enableScDaemon = true;
    enableSshSupport = true;
    grabKeyboardAndMouse = true;
    pinentryFlavor = lib.mkDefault "gtk2";
    extraConfig = "";

    defaultCacheTtl = 0;
    maxCacheTtl = 0;
  };
}