creating separate gpghome to accommodate need for read-only