rework gpg.conf based on the Riseup OpenPGP Best Practices