This seems really complicated. The whole point is to keep things simple and easy and not bloated with lots of applications and database formats and whatnot. In

This seems really complicated. The whole point is to keep things simple and easy and not bloated with lots of applications and database formats and whatnot. In any case, the GPG files have the ID of the key needed to decrypt them, so you can encrypt files with different keys, and so long as you have that key in your keychain still, you're good. I guess I could add a simple convenience command "pass normalize" that decrypts everything and re-encrypts it using a single key. This would be a pretty simple way of doing it.