Add gpg.md

These instructions are correct for my version of (`gpg (GnuPG/MacGPG2) 2.0.20`), but since this is security related, I would recommend at least some review and checking against other versions/systems before accepting this pull request.