--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/tools/.gnupg/gpg.conf	Tue Dec 09 11:43:38 2014 -0800
@@ -0,0 +1,9 @@
+# When verifying a signature made from a subkey, ensure that the cross
+# certification "back signature" on the subkey is present and valid.
+# This protects against a subtle attack against subkeys that can sign.
+# Defaults to --no-require-cross-certification.  However for new
+# installations it should be enabled.
+require-cross-certification
+
+keyserver hkp://keys.gnupg.net
+keyserver-options honor-http-proxy auto-key-retrieve