Add GPG key generation.  Key import not automated

Uses PBKDF2 as deterministic random byte generator.  This is SLOW, we
may want to instead use PBKDF2 to initialize a more traditional DRBG
like HMAC-DRDB.

Automated key import could be added, but for now we just document the
steps to take before we print the key.