initial work towards gpg signing