Crypto restrictions (was Re: PGP kerserver infrastructure)