[Bug 1088255] VUL-1: CVE-2018-9234: gpg2: Unenforced configuration allows for apparently valid certifications actually signed by signing subkeys