It has been tedious but I always took the time for every version to update each versions existing pgp file to avoid failures.
Of course I use a mapped network share for the files and routines and a batch file to xcopy them to each users local machine, so what I manage has to be on point with each version roll out. Right now though, this company is fed up with the upgrades every year when issues are not addressed but simply moved sideways.