My original idea was to add the PGP keys to ENS, but I chose not to because names expire, and the merging operation is more involved than just replacing the entire key.
To get PGP keys for an ENS name, I’d just resolve its address, then look that up in the PGP registry contract.