Things to think about first: - Should we support multiple recipient pubkeys? - Should we have a pubkeyring for the password store so that encrypting is always possible? - Should we support both asymmetric and symmetric encryption in the same password store?