|Subject:||Importing PAUSE public key into your GnuPG keychain...|
Consider this when installing the CPAN bundle: Importing PAUSE public key into your GnuPG keychain... gpg: WARNING: using insecure memory! gpg: please seefor more information done! (You may wish to trust it locally with 'gpg --lsign-key 450F89EC') Checking if your kit is complete... Looks good Writing Makefile for CPAN SUGGESTION Not all people use one monolithing GPG keyring, so any automatic "imports" beyond user control is bad. Please don't automatically import any keys, but sugest the KEYID or present a gpg key fetch command to use. Here is an example of the typical use of multiple keyrings to separate keys according to their use: $ cat ~/.gnupg/gpg.conf keyring pubring-remailer.pgp keyring pubring-sw-development.pgp In this case the CPAN key would have been put into pubring-sw-development.pgp, but the CPAN installer script couldn't have known that.