add gpg.conf, certs
add riseup cert