diff --git a/src/Propellor/Gpg.hs b/src/Propellor/Gpg.hs
index c65d06e..e478f61 100644
--- a/src/Propellor/Gpg.hs
+++ b/src/Propellor/Gpg.hs
@@ -93,6 +93,7 @@ gpgEncrypt f s = do
 		[ "--default-recipient-self"
 		, "--armor"
 		, "--encrypt"
+		, "--trust-model", "always"
 		] ++ concatMap (\k -> ["--recipient", k]) keyids
 	encrypted <- writeReadProcessEnv "gpg" opts
 		Nothing