the gpg key is for testing only, seriously