Working around bug in gpg: it appears that gpg ignores the -r
recipient flag and instead uses the first key added to the key ring,
which is very useless behavior.  So this commit changes the gpg-dir to
be a random dir in /tmp which gets deleted right after completing the
encryption.  Since this is done using a public key, it is sort of okay
to put it in tmp for a bit.