make unarmor() more flexible, make sure pgp mpis are minimal