For context, here's what the wisdom of the crowd is rigging together around GPG to get this single-sign-on feature: