https://esli.blog/posts/beyond-gpg-hardware-backed-file-encryption-with-age-and-yubikey/