pass: fake fake

.envrc

@@ -1,3 +1,4 @@
+
 _gpgconv="gpg2 -d --quiet --yes --compress-algo=none --no-encrypt-to"
 if [ "$(git config diff.gpg.textconv)" != "$_gpgconv" ]; then
     git config diff.gpg.binary true
@@ -5,3 +6,5 @@ if [ "$(git config diff.gpg.textconv)" != "$_gpgconv" ]; then
 fi
 
 export PASSWORD_STORE_DIR=$PWD/secrets
+export REAL_PASS=$(which pass)
+PATH_add tools

tools/pass

@@ -0,0 +1,9 @@
+#!/bin/sh
+
+# This hack allows passwords to be in a sub-directory "secrets", and
+# still visible for git.
+#
+# This is not a good setup, because `pass git status` will show
+# relative paths to `secrets/`. We need a better solution, but I
+# don't know a good one yet.
+grep -v "export GIT_CEILING_DIRECTORIES=" "$REAL_PASS" | bash -s -- "$@"