use openat for gpgme_sign
cleanup gpgme_verify to use openat