PGP security problems?