explicit gpg signing thru profile