I'm still constantly surprised that this feature isn't ubiquitously built into mail clients by default and users don't get a big 'enable encryption' button which automates sane defaults/manages the keychain transparently. It doesn't seem like such a complicated abstraction that it needs so much manual setup