Use --status-fd for key generation and signature verification

Much much much cleaner than parsing the output of GPG.