When decrypting a message with hidden recipients with the following command:

gpg --decrypt
<paste the encrypted message>

pinentry will ask for the passphrase of the first secret key.
If the passphrase is not correct or the the message wasn't encrypted for that
secret key, the same passphrase is used for all following keys that are tested.

The correct behavior however can be seen in the following scenarios:

• The passphrase request for each key that is not the correct one is cancelled.
  • pinentry will then ask for each key's passphrase.
• --status-fd 1 is appended to the command

This was tested using our MacGPG 2.0.20 since we expected it to be a bug
in our patches, but using the stock gnupg 2.0.20, this issue can be reliably
reproduced as well.