release v0.4.0:
- include fingerprints of signatures in result and compare only those
- pubkey_attachment returns default key if no key specified
- key_ids option for find_gnupg_key
- backwards incompatible changes:
- * the default for 'strict' is now False
- * find_gnupg_key returns fingerprints by default