disable GPG signing for releases