at the moment, gpg-agent protects all of its secret key material with a compiled-in default number of s2k hashes (see T3399). It might be nice to allow users to change this default at runtime with a value in ~/.gnupg/gpg-agent.conf (or on the command line when launching)