initial version of a check_gpg plugin

known issue: the plugin does not issue an error if the key that we're
verifying was revoked.