remove GPG flag --with-sig-list for compatibility reasons with older gpg versions