cleaned up links to openpgp best practice doc