{

  config = {
    programs.gpg = {
      enable = true;
      scdaemonSettings.disable-ccid = true;
      settings = {
        ask-cert-expire = true;
        ask-cert-level = true;
        keyserver-options = "no-self-sigs-only";
      };
    };
  };

}