new GPG key - this new one is signed by the old expiried one - closes #779