implement RFE 3314, 'user can't see validity of gpg signatures' [SIC]