[pass] explanation - git commit stores contents of files

[Jason A. Donenfeld]

Nothing is stored in cleartext. We install a textconv helper, so that
when git displays a gpg file, it decrypts it first. Your passphrase is
still required, and it remains encrypted on disk.