Allow users to exclude specific domains or contacts from PGP signing while keeping the feature enabled globally. This is particularly relevant for business contexts where certain partners or clients use email/calendar systems that don't handle PGP-signed messages correctly (e.g. calendar invites with .ics attachments). A per-domain or per-contact toggle for "Sign external messages" would solve this.