config as gpg ascii-armored blobs in DNS TXT RR