when creating a new key, gpg2 creates a selfsig and a subkey which is selfsiged as well. Why does it do so? Why not create just a plain key without subkey and selfsig?