gpg signature verification notes