This lets me set up and prepare all the gpg stuff, but then it is turned off by default, so if you do a "mvn install" you won't have to sign things.  It's only useful before a deploy, but has to be done post-package, pre-install.  This enables "mvn deploy -Dgpg.skip=false -Dgpg.keyname=<yourkey>" as a one-liner for deployment.