pam-gnupg wants the keygrip, git wants the keyID
This makes it much easier to test and apply changes.