check for archives/signatures before asking for repositories otherwise it's a PITA