[pass] Signing individual pass files

[Jason A. Donenfeld]

Actually, we don't use --sign for gpg, for signing. Instead we use git's
signing feature, which invokes gpg --sign internally to sign *commits*.
This way, the entire directory tree is signed, not just the contents of
files. This prevents tampering with the overall structure of the repo.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.zx2c4.com/pipermail/password-store/attachments/20140724/07042081/attachment.html>