don't link gpg to gpg2 via aliases, alternatives is better
umask can now be temporary overwritten
also: sanity check for provided umask