rewritten. Allows for USA/non-USA support via the familiar USE_RSAREF2 mechanism, and significantly cleaned up. Does not attempt to fall back to $HOME/.pgp for keys as in the FreeBSD port, as other programs already require PGPPATH to be set.