Be more forgiving when looking for the end of embedded PGP headers.

There is supposed to be a blank line between the headers and the body of the
message, but some implementations produce a line consisting of a space instead
of a really empty line, so accept this too -- otherwise we don't show the
contents of the message at all if verifying its signature fails, which doesn't
seem right.