That would mean two stages of password query, which I think might be a con. Also, the file names would either not be encrypted in the git repo or not be compatible with e.g. Android app I guess.
Thanks for the autofs hint, will try it and see how that works out re unlocking.
Could use autofs to make it auto mount when pass accesses the mount point.