added gpg settings to always verify sigs, passphrase timeout, etc