PGP 8 flaw work-around