work around GnuPG being silly with redirects