PGP legalities