create some depency mess. The long term solution is to update+merge gnupg2 into gnupg1 but for now at least we have a clean dependency chain. looks ok to jasper@ and pea@