I have a (homemade) thin bash-wrapper around gnupg, which stores the passwords in a folder, that is backed up by git-annex..

The main work is done by a vim-autocommand-group (augroup) which runs the file through gpg on open/save if it ends with .gpg