Basic workflow:
# online$ CAFFDIR=$PWD caff --download ${keyids}
echo "NEXT STEP: on your secure offline system, run XXX"
# offline$ CAFFDIR=$PWD GNUPGHOME=${secret_dir} caff --sign
echo "NEXT STEP: on your online system, run XXX"
# online$ CAFFDIR=$PWD caff --mail