more html escaping in templates, toggle between PGP armored body and clear body
harden the underscore templates