use the OpenPGP web of trust to verify ssh connections