A secure default gpg.conf