Both callers were using `split()` to get a list already.  So we should
just return a list isntead of `join`ing and `split`ting.

Also make the way the gpg command is constructed in the callers look a
bit nicer.