The only problem is that if the user anytime forgots the password and recovers the account the pgp key is reset and the time will show the account is newly created but in reality it was created many times ago