I reproduced this in a restricted runner: starting gpg-agent directly revealed can't create socket: Operation not permitted. Try gpg-agent --homedir <frm-keyring> --daemon --no-detach with the same keyring frm.py uses; its stderr should expose the real cause. If socket creation is blocked, use a runner that permits local Unix sockets. Keep the existing key and saved operation, then follow frm.py's resume instructions rather than creating a new identity.