[bradfitz]

I should update our docs to say:

* If you can get remote code execution in a Go program, use PGP. Otherwise do not.

[bradfitz]

Sent. We'll see if it's approved. https://golang.org/cl/40860