switch to using gpg fingerprint