cleanup gpgme_verify to use openat