> Options --auto-key-retrieve and --auto-key-locate "local,wkd" are now used by default. Sounds like a security hole to me, especially for systems that automat

> Options --auto-key-retrieve and --auto-key-locate "local,wkd" are now used by default. Sounds like a security hole to me, especially for systems that automatically verify signatures against a curated keyring.