We still need a wrapper because (1) sequoia does not fully support
keyring management yet (only public keys, and only from 0.29 in April
2023) and (2) even in versions that do manage keyrings, sq autocrypt
does not support importing the key directly.

This requires a bash script because POSIX doesn't support PIPEFAIL.