added note about gpg asking for a passphrase