--- /dev/null
+{ coreutils, gnupg, writeShellScript }:
+writeShellScript "homeless-gpg" ''
+ set -eo pipefail
+
+ export GNUPGHOME=$(${coreutils}/bin/mktemp -d)
+ trap '${coreutils}/bin/rm -r "$GNUPGHOME"' EXIT
+ ${gnupg}/bin/gpg --no-default-keyring "$@"
+''