similar to the note about e-mail-address-free User IDs in #109, pius should offer to certify user attributes (attached photos). If it does certify attached photos for a given OpenPGP cert, it should send those certifications to every e-mail address that it certifies as well on that certificate.
