don't depend on gnugpg for now