clarify S/MIME vs. GPG policy
Update signature