re-implement GnuPG 'on-the-fly' mode selection