Legal implications of a PGP DLL