diff --git a/pkgsel/Base/Security/Encryption.ask b/pkgsel/Base/Security/Encryption.ask
index 0de5b82..d703674 100644
--- a/pkgsel/Base/Security/Encryption.ask
+++ b/pkgsel/Base/Security/Encryption.ask
@@ -1,13 +1,7 @@
-#Description: Encryption Support (PGP, S/MIME)
+#Description: Basic Encryption Support
+#Default: 1
 
-X gnupg
-X gnupg2
-X gpgme
-     
-X gnupth
-X libassuan
-X libgpg-error
 X libgcrypt
-X libksba
 
-X pinentry
+# needed by libgcrypt
+X libgpg-error
diff --git a/pkgsel/Base/Security/PGP.ask b/pkgsel/Base/Security/PGP.ask
new file mode 100644
index 0000000..d04de2a
--- /dev/null
+++ b/pkgsel/Base/Security/PGP.ask
@@ -0,0 +1,13 @@
+#Description: PGP and S/MIME support
+#Forced: ENCRYPTION
+
+X gnupg
+X gnupg2
+X gpgme
+     
+X gnupth
+X libassuan
+X libksba
+
+# what is this doing here?
+X pinentry