add hardened gnupg config