https://blog.cscholz.io/pgp-subkey-usage/