Sign artifacts with pgp