“While researching what subkeys are and why they might be used instead of --gen-key, I stumbled across this gem: http://wiki.debian.org/subkeys. Debian's wiki explains how to implement option #2 (see OP) using a master key with subkeys, and further explains how to remove the master key”