diff --git a/.envrc b/.envrc
index fb376db..46c260f 100644
--- a/.envrc
+++ b/.envrc
@@ -5,6 +5,4 @@ if [ "$(git config diff.gpg.textconv)" != "$_gpgconv" ]; then
     git config diff.gpg.textconv "$_gpgconv"
 fi
 
-export PASSWORD_STORE_DIR=$PWD/secrets
-export REAL_PASS=$(which pass)
-PATH_add tools
+export PASSWORD_STORE_DIR=$PWD
diff --git a/tools/pass b/tools/pass
deleted file mode 100755
index d67b535..0000000
--- a/tools/pass
+++ /dev/null
@@ -1,9 +0,0 @@
-#!/bin/sh
-
-# This hack allows passwords to be in a sub-directory "secrets", and
-# still visible for git.
-#
-# This is not a good setup, because `pass git status` will show
-# relative paths to `secrets/`. We need a better solution, but I
-# don't know a good one yet.
-grep -v "export GIT_CEILING_DIRECTORIES=" "$REAL_PASS" | bash -s -- "$@"