yay, i'm moving forward with gpg-agent. i didn't realize you have to use ssh-add. but i made a mistake with the gpg key passphrase, and then `ssh-add` just failed with `agent refused operation` - so i killed gpg agent but `home-manager switch` fails with

```bash
Activating reloadSystemD
The user systemd session is degraded:
  UNIT              LOAD   ACTIVE SUB    DESCRIPTION                                   
● gpg-agent.service loaded failed failed GnuPG cryptographic agent and passphrase cache

```