upgrade to openpgp.js 0.5.1
improve sanitizer for things from webhooks, just in case fixes #210