My Emacs configuration https://git.cjennings.net/dotemacs/atom?h=main 2026-06-29T23:46:28+00:00 2026-06-29T23:46:28+00:00 Craig Jennings c@cjennings.net 2026-06-29T23:46:28+00:00 urn:sha1:549fcca10fbbdfa52b6061bac6b33683ccfb53fe calendar-sync ran calendar-sync-start at load, which syncs immediately and then every interval. Every configured calendar resolves its .ics feed URL from a :secret-host in authinfo.gpg, so both the immediate sync and each timer tick decrypt authinfo.gpg. On a cold gpg-agent (after a reboot) that surfaced as a GPG passphrase prompt right after startup, before I'd asked for anything needing a secret. I deferred the whole start, immediate sync and recurring timer alike, to the first org-agenda use via a one-shot org-agenda-mode-hook. The unlock now happens when I actually open the agenda. A manual calendar-sync-start or calendar-sync-now still works on demand.