`pass git diff` decrypts the passwords for me.