pgp certificate disclaimer