code: func DefaultSecretRingFile() string {
  	dir, err := perkeepConfigDir()
  	if err != nil {
  		log.Fatalf("couldn't compute DefaultSecretRingFile: %v", err)
  	}
  	return filepath.Join(dir, "identity-secring.gpg")
  }
docs: // DefaultSecretRingFile returns the path to the default GPG secret
  // keyring. It is not influenced by any flag or CAMLI* env var.