Also allow packages signed by subkeys