gnupg: Default gnupg1compat to gnupg21 and pin git-annex