Although we give a hint in the pinentry when using the --extra-socket this can still be used to remotely sign data without the user noticing this because the key's passphrase has already been cached by local use. This needs to be fixed.