I have some timed services using gopass to get credentials for, among other things, mbsync and vdirsyncer. These run on a user cron job, and they need a password to decrypt the credentials. The credentials are cached, but the cache is cleared every couple of hours, and if the screen locks.