A concise headless keyring cheat sheet, comparing pass, secret-tool, and keepassxc-cli with the usual CRUD and GPG init.