fixes #2106 - add GPG signing key