keys do have a key date
message can drop checksum
revoke publishing
key publishing
new revoke handling.... revokes are selfsigned in general
autocreate captcha dirs