GPG updates

Added important information to prevent dependency hijacking by a new, untested and untrusted fork of python-gnupg.