• Skip "grp" records, generated by GPG 2.1; this suppresses "unknown
  record type" warnings
  
• Add explicit Fatal dependency; though nominally part of code perl,
  RedHat's perl does not ship with it
  
• Ensure that the trustdb is created before attempting to encrypt; gpg2
  requires that it exist, even for commands with --trust-model=always.
  See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=751266