add command-line option to disable PGP verification