browser-generated pgp key pair; stored contracts