PGP vs PEM discussion