Paths of trust in PGP