pinentry-program /usr/local/bin/pinentry
keep-display
default-cache-ttl 600
max-cache-ttl 7200
# for pam_gnupg
allow-preset-passphrase