what does pgp use to verify identity?