require gpg key for custom repos