Group sharing security

[Jason A. Donenfeld]

>From the pass(1) man page section on environment variables:

       PASSWORD_STORE_SIGNING_KEY
             If this environment variable is set, then all .gpg-id
files and non-system extension files must be signed
             using a detached signature using the GPG key specified by
the full 40 character upper-case fingerprint in
             this variable. If multiple fingerprints are specified,
each separated by  a  whitespace  character,  then
             signatures must match at least one.  The init command
will keep signatures of .gpg-id files up to date.