gpg: release DEK soon after its use.