All three of these patches are needed to really close the bug:

 * we need the test to work without -m PEM

 * we need to change the secret key creation to use ssh-add and
   gpg-agent.

 * we need to convert to the --quick-* functionality for
   {add,revoke}_name, so that we don't have problems with
   --export-secret-key from this kind of secret key creation (see
   https://dev.gnupg.org/T4490).

These changes also require the use of a more modern version of GnuPG,
so we update the dependencies accordingly.