age is a file-encryption tool, and the hardest requirement is often future recovery. Encrypt a sample file for multiple intended recipients, remove access for one recipient in a controlled test, and verify that an authorized person can still decrypt from a clean machine.
Compare key distribution, rotation, scripted use, and error handling. Document where recovery identities live and who can access them; do not place private keys in the same backup as the encrypted archive. Inspect the resulting file format and interoperability with your recipients. Choose the workflow that can be explained and recovered reliably, not merely the shortest command line.
Akousa