Use 'sudo' to invoke zfs.
add GPG support; improved retention algorithm