Applied as https://git.zx2c4.com/password-store/commit/?id=a271b43cbd76cc30406202c49041b552656538bd Hopefully there aren't legit gpg key IDs with # in them.