another gpg dependency