There's no real reason to have this variable, there's only one `got' usually and people are better off putting it somewhere in $PATH. Retain PLASS_GPG as there seem to be a little issue with gpg vs gpg2 so the knob may be useful in practice.

More often than not, services provide the URI for TOTP and not the raw secret. While it's easy to manually extract the secret from the querystring, teach totp how to do that on behalf of the user. Manpage bits will follow. Discussed with heph.

File::Temp lied. it says UNLINK defaults to true but the files were still in my /tmp. Quick workaround, needs something better that takes care also of cleaning up on die().

It's more or less equivalent to $ cd /tmp $ umask 077 $ plass cat entry > tempfile $ $EDITOR tempfile $ plass tee entry < tempfile $ rm tempfile but way easier. It's also safer because it creates an unique randomly named file set up with correct permissions. Suggested by heph, thanks!

This does not affect `plass cat', `plass tee' etc, only the `find' sub-command. Discussed with heph.

Hinting at pass(1) doesn't help with the understanding of how plass works. The hint in EXAMPLES and the HISTORY section are enough.