bind gpg signing to verify phase