gpg signature for xpi