Add explicit gpg signing plugin for newer version than parent pom