Shameless plug: Might be interesting to combine this with client-side encrypted remotes, a feature of https://github.com/lucas-clemente/git-cr :)