PGPsdk and freeware developers

I just had a thought. How does a freeware developer in the US distribute a program that uses PGPsdk? Would one have to set up an export-controlled web site to make sure them 'bad' foreigners don't get it? -- Phelix