* should be better usability if the sender's key(s) are not "hidden"
  between the keys of the recipients
* in mixed mode we need two encryption keys for the sender (OpenPGP
  and S/MIME), but only one encryption key for the recipients (OpenPGP
  or S/MIME); clear separation of the keys should avoid confusion