switch to openssl for crypt, instead of (unreliable) gpg