The Keybase encrypted Git is just fine [0]. While Keybase still exists at least. Still sad about that one :(
my take away from implementing this is that git remote helpers are easy to write and very flexible.
Im happy that there are some alternatives being developed.