Add notes on why keys are generated off-chip.
Add notes on using gpg 2.0.22 if at all possible.