Make the "clearsign" PGP signing default to off.