Using gnupg instead of gpg

seems to be the same package but this way boxen doesn't always try to
reinstall it