OpenPGP Best Practices: clarified self-signature recommendations