disable gpg until key is under https