code: func SecretRingFile() string {
  	if flagSecretRing != "" {
  		return flagSecretRing
  	}
  	if e := os.Getenv("CAMLI_SECRET_RING"); e != "" {
  		return e
  	}
  	return identitySecretRing()
  }
docs: // SecretRingFile returns the path to the user's GPG secret ring file.
  // The value comes from either the --secret-keyring flag (if previously
  // registered with AddSecretRingFlag), or the CAMLI_SECRET_RING environment
  // variable, or the operating system default location.