pinentry-program /usr/local/bin/pinentry
keep-display
default-cache-ttl 600
# for pam_gnupg
allow-preset-passphrase
max-cache-ttl 86400  # a day