make dns primary export and keyring host collect firewall rules for the openpgpkey...