Duplicity by default asks for passwords to GnuPG keys on start up and caches them in memory throughout process lifetime. Is there a way to have it use /usr/bin/pinentry instead so I know I'm not passing the passphrase through Duplicity?
I'm using GnuPG hardware smart cards, so generally when a sign or decrypt operation is requested, I usually get a pinentry dialogue that pops up. I can configure gpg-agent to cache my passphrases for a set amount of time.
Is there a way to have Duplicity not know my GnuPG keys and use the GnuPG agent and pinentry to bypass inputting my passphrase into Duplicity?