code: func (g *GPG) Encrypt(ctx context.Context, plaintext []byte, recipients []string) ([]byte, error) {
  	args := append(g.args, "--encrypt")
  	if gpg.IsAlwaysTrust(ctx) {
  		// changing the trustmodel is possibly dangerous. A user should always
  		// explicitly opt-in to do this
  		args = append(args, "--trust-model=always")
  	}
  	for _, r := range recipients {
  		args = append(args, "--recipient", r)
  	}
  
  	buf := &bytes.Buffer{}
  
  	cmd := exec.CommandContext(ctx, g.binary, args...)
  	cmd.Stdin = bytes.NewReader(plaintext)
  	cmd.Stdout = buf
  	cmd.Stderr = os.Stderr
  
  	out.Debug(ctx, "gpg.Encrypt: %s %+v", cmd.Path, cmd.Args)
  	err := cmd.Run()
  	return buf.Bytes(), err
  }
docs: // Encrypt will encrypt the given content for the recipients. If alwaysTrust is true
  // the trust-model will be set to always as to avoid (annoying) "unusable public key"
  // errors when encrypting.