debian build - pass key over HTTPS