Well, one issue with the new version is that it wants a GPG passphrase
*EVERY RUN*, and also doesn't know how to ask for it properly: you
need to do shenanigans with an agent and such. The following:
--gpg-options="--pinentry-mode=loopback
--passphrase-file=${passphrase_file}"
does NOT work, because duplicity has its own way of doing things and
still wants a passphrase. It recommends putting the phrase in an
*environment variable* which is an awful security problem.
The old version (a) only needed the passphrase rarely, and (b) when it
did need it, you could run it in a terminal and it would just ask for
it.