What's the matter with PGP?