first incarnation of msg verifying

this is WIP and most likely subject to change completely. Just messing
around with stuff.

Note: openpgp.js will be removed again, later